OntoRBAC：基于本体的RBAC策略描述与集成

随着分布式安全系统研究的不断深入和发展，基于策略的体系结构已经逐步成为了访问控制系统中的一种主流方法。然而这些策略的定义均建立在特定的语言基础上。如何在异构的系统间进行集成尚缺乏有效的机制。本文提出了一种基于本体的访问控制策略定义机制——OntoRBAC——它完全支持了RBAC96模型，利用本体这个工具，能够为访问控制策略的制定提供更精确、更强大的描述能力，并且可以实现从语义层次上对不同策略的集成。而借助于SWRL（Semantic Web Rule Language），我们定义了多条适用于OntoRBAC的规则来进行对访问控制决策的推理。最后，介绍了这个系统的实现框架。

OntoRBAC: Specify and Integrate RBAC Policies with Ontologies

Policies are becoming an increasingly popular approach to access control systems of applications in academia and industry.As information pertaining to different policies has varying access control requirements,in this paper,we propose the definition of OntoRBAC,an ontology of a general RBAC policy.Supporting and extending the RBAC96 model,it helps to specify role-based access control policies more accurately for the powerful expressive ability.It also provides more effective ways to integrate other policies in the semantic level.Some rules in form of SWRL have been defined to reason within the OntoRBAC.At last,the architecture of implementation is discussed.