基于语义技术的软件用户访问控制方法  

Semantic-based Access Control Approach for Software User

作　　者：郑高山[1,2] 应时[1,2] 吴睿[1,2] ZHENG Gao-shan YING Shi WU Rui(State Key Lab of Software Engineering,Wuhan University,Wuhan 430072, China Computer School,Wuhan University,Wuhan 430072,China)

机构地区：[1]武汉大学软件工程国家重点实验室,武汉430072 [2]武汉大学计算机学院,武汉430072

出　　处：《计算机科学》2016年第8期131-136,共6页Computer Science

基　　金：国家自然科学基金项目:面向运行性能改善的SaaS软件部署方案自优化方法(61373038);国家自然科学基金项目:基于框架的面向服务软件异常处理方法研究(61070012);国家863计划项目:网构化软件运行支撑和在线管理技术与机制(2012AA011204)资助

摘　　要：在应用软件中广泛使用的访问控制模型不能根据用户上下文来动态改变资源的访问权限。针对上述问题提出一种基于语义技术的访问控制方法,实现了对用户的动态授权。提出基于语义信息的用户模型和资源模型并构建面向用户模型和资源模型的基础本体,定义一组与访问控制相关的语义规则及推理规则,并设计基于语义推理过程的判定算法。访问控制过程是接收并分析访问请求,根据语义规则从显示的本体知识中获取相关联的用户信息,调用判定算法得出用户与资源间的访问权限关系。最后通过某综合减灾应用系统案例来验证该方法的有效性。The access control model widely used in the application software can＇t dynamically change the resource ac- cess permissions according to the user-context. This paper proposed a semantic-based access control approach which rea- lizes the dynamic authorizing to users. Firstly,we proposed a user model and a resource model based on semantic infor- mation, built the foundation ontology for the user model and the resource model, then defined a set of semantic rules and inference rules, and designed a decision algorithm based on semantic reasoning process. The process of the approach is that receiving and analyzing access requests, obtaining the related user information from the ontology knowledge accor- ding to the semantic rules, and invoking the decision algorithm to generate the final recommended results. Finally, a case of comprehensive disaster reduction system was studied to validate the effectiveness of the approach.

关 键 词：访问控制 上下文 推理规则 本体 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]