Query Based Access Control for Linked Data

arXiv (Cornell University)

Abstract

In recent years we have seen significant advances in the technology used to both publish and consume Linked Data. However, in order to support the next generation of ebusiness applications on top of interlinked machine readable data suitable forms of access control need to be put in place. Although a number of access control models and frameworks have been put forward, very little research has been conducted into the security implications associated with granting access to partial data or the correctness of the proposed access control mechanisms. Therefore the contributions of this paper are two fold: we propose a query rewriting algorithm which can be used to partially restrict access to SPARQL 1.1 queries and updates; and we demonstrate how a set of criteria, which was originally used to verify that an access control policy holds over different database states, can be adapted to verify the correctness of access control via query rewriting.

Authors 4

1. Sabrina Kirrane

   Vienna University of Economics and Business

   Affiliation as printed

   Vienna University of Economics and Business , Austria

2. Alessandra Mileo

   Dublin City University

   Affiliation as printed

   Dublin City University , Ireland

3. Axel Polleres

   Vienna University of Economics and Business

   Affiliation as printed

   Vienna University of Economics and Business , Austria

4. Stefan Decker Aachen Fraunhofer FIT

   Fraunhofer Institute for Applied Information Technology · RWTH Aachen University

   Affiliation as printed

   Fraunhofer FIT , RWTH Aachen University , Germany