Context Ontology for Secure Interoperability

During interoperability exchanges, organizations are jointly conducting computation and sharing tasks. However, organizations can have different security policies. To guarantee good interoperability exchanges, organizations need to share with other participants information about the services they provide. In addition, to be compliant with security requirements during interoperability, security policies have to be dynamic. One purpose of this paper is to provide this dynamic behavior by taking care about context of access parameters. The context-aware security requirements may be met by using a contextual access control model to define the security policy of each party involved in the interaction, and OrBAC (Organization based Access Control) is an adequate model for this purpose. Elaborating an ontology based security model provides a mean to ensure sharing of understandable knowledge, in particular knowledge needed to derive the authorized accesses and usages during the interoperab...

• Type: Conference
• Year: 2008
• Where: IEEEARES
• Authors: Céline Coma, Nora Cuppens-Boulahia, Frédéric Cuppens, Ana R. Cavalli
• Keywords: IEEEARES 2008, Interoperability Exchanges, Security, Security Policies, Security Privacy