CT-T: Collaborative Research: A Semantic Framework for Policy Specification and Enforcement in a Need to Share Environment

CT-T：协作研究：需要共享环境中政策规范和执行的语义框架

• 批准号: 0716424
• 负责人: Bhavani Thuraisingham
• 金额: --
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-15 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716424&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Semantic; Framework

We live in the information age, a time when data and knowledge is plentiful and easily moved, processed and mined by machines. This makes it easier to discover knowledge and more efficiently manage our affairs but also increases concerns about information confidentiality, privacy and trust. Balancing these will be a defining challenge in the coming decades and is particularly urgent today in organizations responsible for national defense, law enforcement, emergency services, and public health and safety. The 9/11 Commission addressed this in their report and called for "a paradigm change from Need to Know to Need to Share". This project will explore one concrete aspect of this shift -- how executable policies can help organizations enhance their ability to share information and access while still maintaining appropriate levels of security, confidentiality and privacy.The University of Maryland, Baltimore County, the University of Texas at San Antonio and the University of Texas at Dallas will build on existing work at our three institutions to develop and refine a a conceptual framework for computational policies to support information sharing in a need to share environment. Our framework will integrate and extend our work on access control (RBAC), usage control (UCON) and deontic policies (REI), grounding them in ontologies expressed in the Semantic Web language OWL. We will use it to design a policy specification language and enumerate required software artifacts and tools. Finally, we will study the framework applicability to realistic applications such as the management of healthcare records and homeland security related data.

我们生活在信息时代，数据和知识丰富，并且很容易被机器移动、处理和挖掘。这使得我们更容易发现知识并更有效地管理我们的事务，但也增加了对信息机密性、隐私和信任的担忧。 平衡这些将是未来几十年的一个决定性挑战，对于当今负责国防、执法、紧急服务以及公共卫生和安全的组织来说尤为紧迫。 9/11 委员会在其报告中解决了这一问题，并呼吁“从需要知道到需要分享的范式转变”。 该项目将探讨这一转变的一个具体方面——可执行的政策如何帮助组织增强共享信息和访问的能力，同时仍然保持适当的安全性、保密性和隐私水平。马里兰大学巴尔的摩分校、德克萨斯大学圣安东尼奥分校和德克萨斯大学达拉斯分校将在我们三个机构现有工作的基础上，开发和完善计算政策的概念框架，以支持需要时的信息共享 共享环境。 我们的框架将集成和扩展我们在访问控制 (RBAC)、使用控制 (UCON) 和道义策略 (REI) 方面的工作，将它们扎根于语义 Web 语言 OWL 表达的本体中。 我们将使用它来设计策略规范语言并枚举所需的软件工件和工具。 最后，我们将研究该框架在实际应用中的适用性，例如医疗记录和国土安全相关数据的管理。