CONTROLLED DISCOVERY OF GRID SERVICES BASED ON THE SEMANTIC ANNOTATION OF ACCESS CONTROL POLICIES USING ONTOLOGIES AND SEMANTIC RULES

摘要

The present invention relates to system and method for controlling service Access Control (AC) policies, preferably in order to discover/select service instances in a Grid. The service AC policies comprise AC policy annotations with a static part and a dynamic part. In particular, the system of the present invention is an extension for existing service discovery frameworks, wherein the static part is represented by a security ontology to represent a PBAC model and/or to user credential ontology and/or the static AC policies, whereas the dynamic part is represented by semantic rules to declaratively represent dynamic AC policies based on the security ontology and/or static AC policy annotation.