Easy Expression of Authorisation Policies

这个长达20个月的项目的主要目的是让网格管理者能够通过使用受控自然语言来指定访问他们的网格计算资源的授权策略。政策工具将使用研究开始时开发的模型和本体，分析、解释政策，并将其存储在自己的内部表示中。该政策工具将提示管理人员澄清任何不清楚的术语(例如，什么是弗雷德？它是文件名还是用户名？)，解决任何歧义，一旦完成，将以类似的自然语言打印出政策，使用尽可能接近原始输入语言的措辞。这将允许经理查看计算机是否完全理解了他的政策，但如果没有，经理将需要编辑他的政策并重新提交，直到计算机的版本与他自己的版本在含义上相同。最后，该工具将策略编译成两种现有的XML授权策略语言(XACML和PERMIS)，以便策略可以自动提供给现有的网格授权引擎(策略决策点)。通过这种方式，我们可以确保所实施的策略是经理想要的策略。

The primary purpose of this 20 month long project is to allow Gridmanagers to be able to specify the authorisation policy for access totheir Grid computing resources through the use of controlled naturallanguage. The policy tool will parse the policy, interpret it, and store it in its own internal representation, using a model and ontologydeveloped at the start of the research. The policy tool will prompt themanager to clarify any unclear terms (e.g. what is Fred? Is it afilename or a username?), resolve any ambiguities, and once this hasbeen done will print the policy out in similar natural language, usingwording as near to the original input language as possible. This willallow the manager to see if the computer has fully understood hispolicy, but if not, the manager will need to edit his policy andresubmit it, until the computer's version is identical in meaning to his own. Finally, the tool will compile the policy into two existing XML authorization policy languages (XACML and PERMIS) so that the policy can be automatically fed into existing Grid authorization engines (policy decision points). In this way, we can be assured that the policy that is implemented is the one that the manager intended it to be.