Reasoning with semantics-aware access control policies for geospatial web services

ABSTRACT

A major obstacle on the way to the successful deployment and operation of Web services on a larger scale is a lack of sophisticated semantics model to represent and communicate the data. To solve the problem, semantics-aware Web services have been proposed. The other major huddle for Web services is the security architecture. Adding semantics to data adds an extra level of security vulnerability because there is scope for rouge agents to retrieve data that are not explicit in the original sources. Our goal is to propose and implement a security framework to thwart such security problems. Not only that, additionally, we demonstrate that proposed semantics can be utilized to cover security instances that would be impossible to achieve in semantics-unaware environment. We define a modular access control policy framework in the context of geospatial data integration platforms. Geospatial semantic Web services can employ the framework to enforce resource access and intelligently make decisions about policy rules. Our framework allows reasoning capabilities at both the resource enforcement point and service discovery point.

REFERENCES

• 1: IBM Microsoft Joint White Paper, Security in a Web Services World: A Proposed Architecture and Roadmap, April 2002.
• 2: Wright, R. Chadha, G. Lapiotis (eds.): Special Issue on Policy Based Networking. IEEE Network, Vol. 16, No. 2, March, (2002), 8--56
• 3: T. Moses, ed., XACML profile for Web-services, http://www.oasisopen.org/committees/download.php/3661/draft-xacml-wspl-04.pdf, working draft 04, 29 Sept 2003
• 4: S. Godik, T. Moses, eds., OASIS eXtensible Access Control Markup Language (XACML) Version 1.1, OASIS Committee Specification, http://www.oasisopen.org/committees/download.php/4103/cs-xacmlspecification-1.1.doc, 24 July 2003.
• 5: T. Moses, ed., Web-services policy language use-cases and requirements, http://www.oasisopen.org/committees/download.php/1608/wd-xacml-wspluse-cases-04.pdf
• 6: Anne H. Anderson, Sun Microsystems Laboratories An Introduction to the Web Services Policy Language (WSPL)
• 7: Andreas Matheus, Declaration and enforcement of fine-grained access restrictions for a service-based geospatial data infrastructure, Proceedings of the tenth ACM symposium on Access control models and technologies, June 01-03, 2005, Stockholm, Sweden [doi>10.1145/1063979.1063983]
• 8: Grit Denker, Lalana Kagal, Tim Finin, Massimo Paolucci, Katia Sycara, Security for DAML Web Services: Annotation and Matchmaking, Proceedings of the Second International Semantic Web Conference (ISWC), San Sanibel (Florida), Oct 2003
• 9: L. Kagal: Rei: A Policy Language for the Me-Centric Project. HP Labs Technical Report, HPL-2002-270, (2002)
• 10: M. Johnson, P. Chang, R. Jeffers, J. Bradshaw, V-W. Soo, M. Breedy, L. Bunch, S. Kulkarni, J. Lott, N. Suri, A. Uszok, KAoS semantic policy and domain services: An application of DAML to Web-Services-based grid architectures. Proceedings of the AAMAS 03 Workshop on Web Services and Agent-Based Engineering, Melbourne, Australia, July, (2003)
• 11: N. Damianou, N. Dulay, E.C. Lupu, M. Sloman: Ponder: A Language for Specifying Security and Management Policies for Distributed Systems. Imperial College, UK, Research Report Department of Computing 2001, (2000)
• 12: Gianluca Tonti, Jeffrey M. Bradshaw1, Renia Jeffers, Rebecca Montanari2, Niranjan Suri, and Andrzej Uszok Semantic Web Languages for Policy Representation and Reasoning: A Comparison of KAoS, Rei, and Ponder
• 13: OWL-S: Semantic Markup for Web Services W3C member submission, Nov 22, 2004, Available: http://www.w3.org/Submission/OWL-S/
• 14: Max J. Egenhofer, Toward the semantic geospatial web, Proceedings of the 10th ACM international symposium on Advances in geographic information systems, p.1-4, November 08-09, 2002, McLean, Virginia, USA [doi>10.1145/585147.585148]
• 15: D. Liping, Z. Peisheng, Y. Wenli, Y. Genong, and Y. Peng, Intelligent geospatial web services, in the Proceedings of IEEE Geoscience and Remote Sensing Symposium, 2005, Volume 2, 25-29 July 2005 Page(s):1229--1232
• 16: Matthias Klusch , Benedikt Fries , Katia Sycara, Automated semantic web service discovery with OWLS-MX, Proceedings of the fifth international joint conference on Autonomous agents and multiagent systems, May 08-12, 2006, Hakodate, Japan [doi>10.1145/1160633.1160796]
• 17: N. Srinivasan, M. Paolucci and K. Sycara, An Efficient Algorithm for OWL-S Based Semantic Search in UDDI, First International Workshop, SWSWPC
• 18: Damian O'Dea , Sean Geoghegan , Chris Ekins, Dealing with geospatial information in the semantic web, Proceedings of the 2005 Australasian Ontology Workshop, p.69-73, December 06, 2005, Sydney, Australia
• 19: F. Bry, B. Lorenz, H.J. Ohlbach, and M. Rosner, A Geospatial World Model for the Semantic Web, position paper, REWERSE, 6th Framework Programme, Project Ref. No. 506779, EU Commission and Switzerland
• 20: A. Vckovski, K. Brassel, and H.-J. Schek Eds. Interoperating Geographic Information systems, in the 2nd International Conference on Interoperating Geographic Information Systems, INTEROP'99, Zurich, Switzerland, Lecture Notes in Computer Science vol. 1580. Berlin: Springer-Verlag, 1999.
• 21: M.F. Goodchild, M. Egenhofer, et al., Eds. (1998). Interoperating Geographic Information Systems (Proceedings of Interop '97, Santa Barbara, CA). Norwell, MA, Kluwer
• 22: Geography Markup Language (GML) version 3.1.1 Specification, Available: http://opengis.net/gml/
• 23: Bernardo A. Huberman , Fang Wu , Li Zhang, Ensuring trust in one time exchanges: solving the QoS problem, Netnomics, v.7 n.1, p.27-37, April 2005 [doi>10.1007/s11066-006-9002-2]
• 24: E. Michael Maximilien , Munindar P. Singh, Toward autonomic web services trust and selection, Proceedings of the 2nd international conference on Service oriented computing, November 15-19, 2004, New York, NY, USA [doi>10.1145/1035167.1035198]
• 25: E. Michael Maximilien , Munindar P. Singh, A Framework and Ontology for Dynamic Web Services Selection, IEEE Internet Computing, v.8 n.5, p.84-93, September 2004 [doi>10.1109/MIC.2004.27]
• 26: J. Cardoso, A. Sheth, J. Miller, J. Arnold, and K. Kochur, Quality of service for workflows and web service processes, in Web Semantics: Science, Services and Agents on the World Wide Web Journal, 2004. 1(3): p. 281--308.
• 27: Evren Sirin and Bijan Parsia. The OWL-S Java API. Poster, In Third International Semantic Web Conference (ISWC2004), Hiroshima, Japan, November 2004.
• 28: Claude Moulin , Marco Sbodio, Using Ontological Concepts for Web Service Composition, Proceedings of the The 2005 IEEE/WIC/ACM International Conference on Web Intelligence (WI'05), p.487-490, September 19-22, 2005 [doi>10.1109/WI.2005.156]
• 29: Fernando, Renier Gibotti, Gilberto Câmara, and R. Nogueira, GeoDiscover -- a specialized search engine to discover geospatial data in the Web, in 7th Brazilian Symposium on GeoInformatics, 2005.
• 30: Frederico Fonseca , Max Egenhofer , Clodoveu Davis , Gilberto Câmara, Semantic Granularity in Ontology-Driven Geographic Information Systems, Annals of Mathematics and Artificial Intelligence, v.36 n.1-2, p.121-151, September 2002

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

General Terms:
Design, Management, Security

Keywords:
OWL-S, RDF, SOA, geospatial semantic web, semantic web services