Access control to resources using ontological models in intelligent enterprise

Yevhen Burov

doi:10.15587/2312-8372.2014.21701

Abstract

This article discusses the problem of controlling access to resources of intelligent enterprise using ontology. The main purpose is to develop methods of knowledge representation, that are used in access control and methods of their use. In this paper we propose to represent knowledge in the form of ontological models. The task of access control is performed in the context of a larger system, of ontological business process modeling. The usage of ontological modeling methods allows, when compared to known access control methods RBAC and ABAC, to realize dynamic, well documented access rights granting and withdrawing in context of currently executed business processes. The results of research can be used for implementation of effective access control system in intelligent enterprise. Proposed access control method, which uses the ontological models of knowledge, allows to simplify access control process and improve overall system security.

Highlights

The growing complexity of information systems, constantly changing business environment requires adaptation of information system to those changes
An important part of adaptation processes is the continuous adjustment of access policies to business processes and environment changes
In ABAC access rights to resources are associated with a set of rules expressed through measurable attributes [4, 6]

Summary

Introduction

The growing complexity of information systems, constantly changing business environment requires adaptation of information system to those changes. One of the increasingly popular approaches to build flexible information enterprise systems is to use knowledge handling technologies, resulting in creation of intelligent enterprise [1]. An important part of adaptation processes is the continuous adjustment of access policies to business processes and environment changes

Related work analysis and problem statement

System architecture

Conclusions

Введение

Контроль знаний с помощью системы Maple