CT-T: Collaborative Research: A Semantic Framework for Policy Specification and Enforcement in a Need to Share Environment

CT-T：协作研究：需要共享环境中政策规范和执行的语义框架

• 批准号: 0716627
• 负责人: Timothy Finin
• 金额: $ 5万
• 依托单位: University of Maryland Baltimore County
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-15 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716627&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Semantic; Framework

We live in the information age, a time when data and knowledge is plentiful and easily moved, processed and mined by machines. This makes it easier to discover knowledge and more efficiently manage our affairs but also increases concerns about information confidentiality, privacy and trust. Balancing these will be a defining challenge in the coming decades and is particularly urgent today in organizations responsible for national defense, law enforcement, emergency services, and public health and safety. The 9/11 Commission addressed this in their report and called for "a paradigm change from Need to Know to Need to Share". This project will explore one concrete aspect of this shift -- how executable policies can help organizations enhance their ability to share information and access while still maintaining appropriate levels of security, confidentiality and privacy.The University of Maryland, Baltimore County, the University of Texas at San Antonio and the University of Texas at Dallas will build on existing work at our three institutions to develop and refine a a conceptual framework for computational policies to support information sharing in a need to share environment. Our framework will integrate and extend our work on access control (RBAC), usage control (UCON) and deontic policies (REI), grounding them in ontologies expressed in the Semantic Web language OWL. We will use it to design a policy specification language and enumerate required software artifacts and tools. Finally, we will study the framework applicability to realistic applications such as the management of healthcare records and homeland security related data.

我们生活在信息时代，在这个时代，数据和知识非常丰富，并且很容易被机器移动、处理和挖掘。这使得我们更容易发现知识，更有效地管理我们的事务，但也增加了对信息机密性，隐私和信任的担忧。 平衡这些将是未来几十年的一个决定性挑战，今天在负责国防、执法、应急服务以及公共卫生和安全的组织中尤为紧迫。 9/11委员会在他们的报告中谈到了这一点，并呼吁“从需要知道到需要分享的范式转变”。 该项目将探讨这一转变的一个具体方面--可执行的政策如何帮助组织提高共享信息和访问的能力，同时仍然保持适当的安全、机密和隐私水平。位于圣安东尼奥的德克萨斯大学和位于达拉斯的德克萨斯大学将在我们三个机构现有工作的基础上，开发和完善一个支持需要共享环境中的信息共享的计算策略的概念框架。 我们的框架将整合和扩展我们的工作访问控制（RBAC），使用控制（UCON）和道义政策（REI），接地他们在语义Web语言OWL表示的本体。 我们将使用它来设计策略规范语言，并列举所需的软件工件和工具。 最后，我们将研究该框架对实际应用的适用性，例如医疗记录和国土安全相关数据的管理。