CT-T: Collaborative Research: A Semantic Framework for Policy Specification and Enforcement in a Need to Share Environment

我们生活在信息时代，在这个时代，数据和知识非常丰富，而且很容易被机器移动、处理和挖掘。这使我们更容易发现知识，更有效地管理我们的事务，但也增加了对信息保密、隐私和信任的担忧。平衡这些将是未来几十年的一项决定性挑战，对于负责国防、执法、紧急服务以及公共卫生和安全的组织来说，这一点尤为紧迫。9/11委员会在他们的报告中提到了这一点，并呼吁“从需要知道到需要分享的范式转变”。本项目将探讨这种转变的一个具体方面——可执行的策略如何帮助组织增强其共享信息和访问的能力，同时仍保持适当的安全性、保密性和隐私性。马里兰大学巴尔的摩分校、德克萨斯大学圣安东尼奥分校和德克萨斯大学达拉斯分校将以我们三所机构的现有工作为基础，开发和完善计算政策的概念框架，以支持在需要共享的环境中进行信息共享。我们的框架将集成并扩展我们在访问控制（RBAC）、使用控制（UCON）和道义策略（REI）方面的工作，将它们建立在用语义Web语言OWL表达的本体中。我们将使用它来设计策略规范语言，并列举所需的软件工件和工具。最后，我们将研究该框架在实际应用中的适用性，例如医疗记录和国土安全相关数据的管理。

We live in the information age, a time when data and knowledge is plentiful and easily moved, processed and mined by machines. This makes it easier to discover knowledge and more efficiently manage our affairs but also increases concerns about information confidentiality, privacy and trust. Balancing these will be a defining challenge in the coming decades and is particularly urgent today in organizations responsible for national defense, law enforcement, emergency services, and public health and safety. The 9/11 Commission addressed this in their report and called for "a paradigm change from Need to Know to Need to Share". This project will explore one concrete aspect of this shift -- how executable policies can help organizations enhance their ability to share information and access while still maintaining appropriate levels of security, confidentiality and privacy.The University of Maryland, Baltimore County, the University of Texas at San Antonio and the University of Texas at Dallas will build on existing work at our three institutions to develop and refine a a conceptual framework for computational policies to support information sharing in a need to share environment. Our framework will integrate and extend our work on access control (RBAC), usage control (UCON) and deontic policies (REI), grounding them in ontologies expressed in the Semantic Web language OWL. We will use it to design a policy specification language and enumerate required software artifacts and tools. Finally, we will study the framework applicability to realistic applications such as the management of healthcare records and homeland security related data.