Semantic Policy Information Point – preliminary considerations

System for semantic technology-based access management in a port terminal

“…With this approach, the decision-making process could be automated even for the complex scenario. We considered this as an opportunity for making the Valencia port system even better and verify the possibility of applying ideas from [2] and [3] at the same time.…”

“…Furthermore, the access controlling module is created as an independent one and thus can be used in any other scenario. Finally, let us note that, as stated in [2], the access control module is a non-disruptive extension of a standard XACML architecture. This, further, shows the generic nature of the proposed approach.…”

“…It is queried by the gates, when drivers approach them. As indicated above, it is based on the SXACML architecture [2] and has been adapted to the port scenario. Overall, it is an implementation of the XACML standard, enriched with semantic technologies.…”

“…The problem is, that attribute-based policies also tend to grow and become complex and hard to maintain, especially with high granularity of access control [2,3,4]. Based on earlier work ( [2,5]), we believe that this problem of attribute based access control can be mitigated by inclusion of semantic technologies into the access-decision-making process. To be able to apply semantic technologies, the domain of a given access control system has to be modeled in the form of an ontology.…”

“…Using such "extra" (inferred) values, in an access policy, can decrease complexity of access management (see, also, Section 3). A solution that follows this approach has been described in [2,5]. It introduces the SXACML system, which is based on the XACML standard for access control, which has been empowered with semantic reasoning.…”