Description Logic and Subject Attribute Based Grid Authorization Model

The grid cross domain authorization has been a research hotspot in the information security held. The existing gird cross-domain authorization mechanisms are not flexible and intelligent enough. To solve the problem we propose a grid authorization model based on the description logic (DL) and the attribute based access control (ABAC). The DL formulates the definition and representation of attributes, provides inference services of attribute relations in the semantic layer to the ABAC engine and makes the authorization procedure more intelligent and normalized. Based on the DL´s functions, the ABAC makes the cross domain authorization policies more flexible. A scenario of the cross RBAC domain authorization procedure and the analysis of the security and time complexity are given in the end which prove the security and usability of the model.