Abstract:

         This paper employs the combination of attributebased access control model (ABAC) and ontology technology to expand the XACML standard structure in order to simplify the access control strategy management in the serviceoriented architecture. This paper then presents a new access control model, ontologybased serviceoriented attributebased access control model (OB_ABAC). Its ontologybased attribute management simplifies the authorization strategy for the heterogeneous attribute of serviceoriented architecture.

Key words: ontology, service oriented, attributebased access control, attribute management