Fine-Grained Filtering of Data Providing Web Services with XACML

This work describes how a fine-grained filtering Web service is generated using an extended XACML architecture for Data Providing Web Services (DPWSs). A DPWS is a Web service tasked with the retrieval of data that is annotated using a domain ontology. This work extends XACML policies to reference filtering classes from a filtering ontology instead of directly referencing fine-grained XML elements. This paper then contributes a language to state relations between the filtering ontology and the DPWS´s domain ontology. It also contributes an algorithm to interpret these relations to determine if a given XML element from a DPWS is a member of a filtering class. This algorithm is then used by the extended XACML architecture to infer how a DPWS shall be filtered. This approach provides a clear separation of concerns between a DPWS´s data domain and the filtering domain.