TY - JOUR AB - A new trend in pervasive personal server hosting is to enable the integration of a user's social spheres. Ideally, the design of access control to private data should be flexible and independent from the target host. Personal data should also remain independent from environmental constraints, e.g., in order to support easy migration to new deployment landscapes. Such information interoperability can be achieved by ontology-based personal information sphere management. In the digital.me project, personal data is modelled using an ontology-based approach. In this paper we address the design and first implementation of the digital.me userware access control engine. Here, we introduce a two-level access control design in order to decouple the ontology based-semantic core from the hosting web container, while ensuring that personal data and the associated ontology-based access rights remain flexibly decoupled from the underlying environment. AU - Bourimi, Mohamed AU - Scerri, Simon AU - Planaguma, Marc AU - Heupel, Marcel AU - Karatas, Fatih AU - Schwarte, Philipp DA - 2011 KW - Authentifizier KW - Authorizierung KW - Ontology-basierte Zugriffskontrolle KW - Spring Security KW - OAuth Authorizierung KW - Authentication KW - (RBAC) Authorisation KW - Ontology-Based Access Control KW - Ontology Trust and Privacy Modeling LA - eng PY - 2011 TI - A two-level approach to ontology-based access control in pervasive personal servers UR - https://nbn-resolving.org/urn:nbn:de:hbz:467-5789 Y2 - 2024-11-22T12:32:58 ER -