返回
Relationship-based Access Control for Data Spaces
DOI:10.1007/s41019-025-00320-y.png)
摘要
En 中文
Data spaces are an emerging concept with significant potential to enable a data-centric economy by fostering seamless and secure data sharing across diverse stakeholders. These environments are designed to unlock the value of data by ensuring interoperability and collaboration, which are essential for innovation and informed decision-making. However, managing access control in data spaces poses unique challenges, as it must account for complex relationships not only among stakeholders but also among data items themselves, requiring a flexible and context-aware approach. To this end, in this paper we present the design, implementation, and evaluation of an access control solution tailored for data spaces. Our solution leverages the paradigm of Relationship-Based Access Control (ReBAC), enabling the definition and enforcement of access control policies that consider the relationships between entities within the data space, as well as data consumer organisational structures. Furthermore, we propose a distributed version of our solution to facilitate the segregation of access control management across different administrative domains. Our approach supports fine-grained, continuous access control by dynamically evaluating the context of both the protected data items and the consumers of the data space. To ensure compatibility with existing data-sharing standards, we have integrated our solution with ETSI NGSI-LD API, a standardised interface for interacting with data spaces.
Keyword:
ReBAC
FIWARE
OpenFGA
Usage control
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
D
IF:
4.6
论文数:
249
被引数:
665
机构
引用论文
D. R. Firdausy, P. de Alencar Silva, M. van Sinderen, M.-E. Iacob, A Data Connector Store for International Data Spaces, in: M. Sellami, et al. (Eds.), Cooperative Information Systems, Springer International Publishing, 2022, pp. 242–258. doi:10.1007/978-3-031-17834-414.D. R. Firdausy, P. de Alencar Silva, M. van Sinderen, M.-E. Iacob, 一种国际数据空间的数据连接器存储,见:M. Sellami等人(编辑),协作信息系统,Springer International Publishing, 2022, 第242–258页。doi:10.1007/978-3-031-17834-414.
Gnomon: Decentralized Identifiers for Securing 5G Iot Device Registration and Software UpdateGnomon:用于保障5G物联网设备注册和软件更新的去中心化标识符
Data Usage and Access Control in Industrial Data Spaces: Implementation Using FIWARE
SUSTAINABILITY
IF3.3
Smart and collaborative industrial IoT: A federated learning and data space approach智能和协作工业物联网: 联合学习和数据空间方法

