1. SOCIAL SEMANTIC
WEB ACCESS CONTROL
Serena Villata, Nicolas Delaforge
Fabien Gandon, Amelie Gyrard
INRIA Sophia Antipolis

2. INFORMATION SEMANTIC INTEGRATION
THROUGH COMMUNITIES OF INTELLIGENCE ONLINE
Tools for assisting corporate intelligence tasks
Interactions: Web 2.0 advanced interfaces (blog, wiki, social bookmarking)
Interoperability and information processing: Semantic Web technologies
#www2012

4. How to define an access control model
for the Social Semantic Web?

5. WHAT TO EXPRESS?
S4AC

7. S4AC
SOCIAL SEMANTIC SPARQL SECURITY
FOR ACCESS CONTROL VOCABULARY
http://ns.inria.fr/s4ac/

8. CREATE
READ
UPDATE
DELETE
Access
Policy

9. http://MyResource.net#www2012 READ
Access
Policy
ASK {?res dcterms:creator ?prov .
?prov sioc:member_of ?group .
?user sioc:member_of ?group }
‘’friends’’, ‘’amici’’, ‘’ami’’ ASK { ?res dcterms:creator ?prov .
?prov dcterms:creator ?gr .
GRAPH ?gr {?user nicetag:hasSign ?tag}}
BINDINGS ?group
{<http://ns.inria.fr/isicil/id/group/edelweiss>}

10. MAXIMUM NUMBER OF ACCESSES
WHY I CANNOT ACCESS?
USER-FRIENDLY USER INTERFACE
Further details

13. ASK { ?res dcterms:creator ?prov .
?prov rel:hasFriend ?user }
ASK {?res dcterms:creator ?prov .
?prov rel:hasFriend{1,2} ?user }
ASK{ ?res dcterms:creator ?prov .
?prov rel:hasColleague ?user }
ASK { ?res dcterms:creator ?prov .
?prov rel:hasParent ?user}

15. ASK { FILTER(random()>0.5) }
ASK{FILTER(!
(?user= <http://MyExample.net#indiana>))}

16. * +! "#! : +!
"
% !A+B : >!
&
USER INTERFACE
% ! $ : ' 3P
& & !
!: 3!35& 3!
+&
ACCESS DENIED
+* : $ " +3!
' * CATEGORIES
ACCESS GRANTED
RDF DATA
& " #! $ &
3! %!
& % 9!: 4&
!$ & ! POLICIES
ACCESS CONTROL
CONTEXTUAL
S4AC POLICIES
CREATOR INFORMATION
SELECTOR
2): $ "+! R
* !
Define own
access conditions
ACCESS
CONTROLLER
Access Control Manager
Webmarks Grant / Deny access
Access request
user Resources user
A B
Personal
information
!

17. !8: 3& !" +!
(
* +! "#! : +!
"
% !A+B : >!
&
USER INTERFACE
% ! $ : ' 3P
& & !
!: 3!35& 3!
+&
ACCESS DENIED
+* : $ " +3!
' * CATEGORIES
ACCESS GRANTED
RDF DATA
& " #! $ &
3! %!
& % 9!: 4&
!$ & ! POLICIES
ACCESS CONTROL
CONTEXTUAL
S4AC POLICIES
CREATOR INFORMATION
SELECTOR
2): $ "+! R
* !
Define own
access conditions
ACCESS
CONTROLLER
Access Control Manager
Webmarks Grant / Deny access
Access request
user Resources user
A B
Personal
information

18. !8: 3& !" +!
(
* +! "#! : +!
"
% !A+B : >!
&
USER INTERFACE
% ! $ : ' 3P
& & !
!: 3!35& 3!
+&
ACCESS DENIED
+* : $ " +3!
' * CATEGORIES
ACCESS GRANTED
RDF DATA
& " #! $ &
3! %!
& % 9!: 4&
!$ & ! POLICIES
ACCESS CONTROL
CONTEXTUAL
S4AC POLICIES
CREATOR INFORMATION
SELECTOR
2): $ "+! R
* !
Define own
access conditions
ACCESS
CONTROLLER
Access Control Manager
Webmarks Grant / Deny access
Access request
user Resources user
A B
Personal
information

19. NAMED GRAPHS

20.  ABEL, DE COI, HENZE, KOESLING, KRAUSE, OLMEDILLA. ENABLING ADVANCED
AND CONTEXT-DEPENDENT ACCESS CONTROL IN RDF STORES. IN ISWC-2007.
 CARMINATI, FERRARI, HEATHERLY, KANTARCIOGLU, THURAISINGHAM. SEMANTIC
WEB-BASED SOCIAL NETWORK ACCESS CONTROL. COMPUTERS & SECURITY,
2011.
 FININ, JOSHI, KAGAL, NIU, SANDHU, WINSBOROUGH, THURAISINGHAM.
ROWLBAC: REPRESENTING ROLE BASED ACCESS CONTROL IN OWL. IN
SACMAT-2008.
 GIUNCHIGLIA, ZHANG, CRISPO. ONTOLOGY DRIVEN COMMUNITY ACCESS
CONTROL. IN SPOT-2009.
 HOLLENBACH, PRESBREY, BERNERS-LEE. USING RDF METADATA TO ENABLE
ACCESS CONTROL ON THE SOCIAL SEMANTIC WEB. IN CK-2009.
 SACCO, PASSANT. A PRIVACY PREFERENCE ONTOLOGY (PPO) FOR LINKED DATA.
IN LDOW-2011.
 STROKA, SCHAFFERT, BURGER. ACCESS CONTROL IN THE SOCIAL SEMANTIC WEB
- EXTENDING THE IDEA OF FOAF+SSL IN KIWI. IN SPOT2010.

21. @serena_villata
serena.villata@inria.fr