Easy Expression of Authorisation Policies

这个为期20个月的项目的主要目的是让网格管理人员能够通过使用受控的自然语言来指定访问其网格计算资源的授权策略。策略工具将使用研究开始时开发的模型和本体来解析策略、解释策略并将其存储在自己的内部表示中。政策工具将提示经理澄清任何不明确的术语（例如，什么是Fred？是文件名还是用户名？），解决任何歧义，一旦完成，将以类似的自然语言打印出策略，使用尽可能接近原始输入语言的措辞。这将允许管理员查看计算机是否完全理解他的策略，但如果没有，则管理员将需要编辑他的策略并重新提交，直到计算机的版本与他自己的版本在含义上相同。最后，该工具将把策略编译成两种现有的XML授权策略语言（XACML和PERMIS），这样策略就可以自动地输入到现有的网格授权引擎（策略决策点）中。通过这种方式，我们可以确保所实施的策略是管理者想要的策略。

The primary purpose of this 20 month long project is to allow Grid managers to be able to specify the authorisation policy for access to their Grid computing resources through the use of controlled natural language. The policy tool will parse the policy, interpret it, and store it in its own internal representation, using a model and ontology developed at the start of the research. The policy tool will prompt the manager to clarify any unclear terms (e.g. what is Fred? Is it a filename or a username?), resolve any ambiguities, and once this has been done will print the policy out in similar natural language, using wording as near to the original input language as possible. This will allow the manager to see if the computer has fully understood his policy, but if not, the manager will need to edit his policy and resubmit it, until the computer's version is identical in meaning to his own. Finally, the tool will compile the policy into two existing XML authorization policy languages (XACML and PERMIS) so that the policy can be automatically fed into existing Grid authorization engines (policy decision points). In this way, we can be assured that the policy that is implemented is the one that the manager intended it to be.