Abstract
The number of publicly accessible knowledge graphs is increasing and so are their applications. Knowledge graphs may contain private data and need to be protected against unauthorized access. There are different approaches for access control to knowledge graphs, e.g., user-based or policy-based. User-based access control can be hard to maintain in systems with hundreds or even thousands of users. In contrast, policy-based approaches use rules to decide whether the access should be granted or denied. ODRL is designed for licensing but also used for policy-based access control. Hence, the evaluation of access policies is not defined and no external data can be considered during the decision-making process. Policies can be seen as integrity constraints and, hence, it is natural to specify them in SHACL; the semantics of SHACL validation are well-defined. SHACL-ACL demonstrates how SHACL can be utilized in a policy-based access control approach. Furthermore, utilizing RML mappings, SHACL-ACL is capable of considering data from various heterogeneous sources for the policy evaluation, e.g., JSON data from Web APIs. The demo is available as an interactive Jupyter notebook.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Notes
- 1.
The code is available at https://github.com/SDM-TIB/SHACL-ACL.
- 2.
The live demo is available at https://mybinder.org/v2/gh/SDM-TIB/SHACL-ACL/HEAD?labpath=SHACL-ACL.ipynb.
References
Capadisli, S., Berners-Lee, T., Verborgh, R., Kjernsmo, K.: Solid Protocol. W3C Solid Community Group Submission (2021). https://solidproject.org/TR/2021/protocol-20211217
Corman, J., Reutter, J.L., Savković, O.: Semantics and Validation of Recursive SHACL. In: The Semantic Web - ISWC 2018 (2018). https://doi.org/10.1007/978-3-030-00671-6_19
Dimou, A., Vander Sande, M., Colpaert, P., Verborgh, R., Mannens, E., Van de Walle, R.: RML: a generic language for integrated RDF mappings of heterogeneous data. In: Proceedings of the Workshop on Linked Data on the Web co-located with WWW (2014). https://ceur-ws.org/Vol-1184/ldow2014_paper_01.pdf
Esteves, B., Pandit, H.J., Rodríguez-Doncel, V.: ODRL Profile for Access Control. Working Draft (2022). https://protect.oeg.fi.upm.es/odrl-access-control-profile/oac.html
Esteves, B., Rodríguez-Doncel, V., Pandit, H.J., Mondada, N., McBennett, P.: Using the ODRL profile for access control for solid pod resource governance. In: Groth, P., et al. (eds.) ESWC 2022. LNCS, vol. 13384, pp. 16–20. Springer, Cham (2022). https://doi.org/10.1007/978-3-031-11609-4_3
Figuera, M., Rohde, P.D., Vidal, M.E.: Trav-SHACL: efficiently validating networks of SHACL constraints. In: The Web Conference (2021). https://doi.org/10.1145/3442381.3449877
Hogan, A., et al.: Knowledge graphs. ACM Comput. Surv. 54(4), 1–37 (2021). https://doi.org/10.1145/3447772
Ianella, R., Villata, S.: ODRL Information Model 2.2. W3C Recommendation (2018). https://www.w3.org/TR/2018/REC-odrl-model-20180215/
Iglesias, E., Jozashoori, S., Chaves-Fraga, D., Collarana, D., Vidal, M.E.: SDM-RDFizer: an RML interpreter for the efficient creation of RDF knowledge graphs. In: CIKM 2020: The 29th ACM International Conference on Information and Knowledge Management, Virtual Event, Ireland, 19–23 October 2020 (2020). https://doi.org/10.1145/3340531.3412881
Knublauch, H., Kontokostas, D.: Shapes Constraint Language (SHACL). W3C Recommendation (2017). https://www.w3.org/TR/2017/REC-shacl-20170720/
Lassila, O., Swick, R.R.: Resource Description Framework (RDF) Model and Syntax Specification. W3C Recommendation (1999). https://www.w3.org/TR/1999/REC-rdf-syntax-19990222/
Manola, F., Miller, E.: RDF Primer. W3C Recommendation (2004). https://www.w3.org/TR/2004/REC-rdf-primer-20040210/
Prud’hommeaux, E., Seaborne, A.: Shapes Constraint Language (SHACL). W3C Recommendation (2008). https://www.w3.org/TR/rdf-sparql-query/
Rohde, P.D.: DeTrusty v0.11.2 (2023). https://doi.org/10.5281/zenodo.7670670
Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., Mortimore, C.: OpenID Connect Core 1.0 incorporating errata set 1. OpenID (2014). https://openid.net/specs/openid-connect-core-1_0.html
Acknowledgements
This work has been partially supported by the EU H2020 RIA funded project CLARIFY (grant agreement No 875160) and the Federal Ministry for Economic Affairs and Energy of Germany (BMWK) in the project CoyPu (project number 01MK21007[A-L]).
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Rohde, P.D., Iglesias, E., Vidal, ME. (2023). SHACL-ACL: Access Control with SHACL. In: Pesquita, C., et al. The Semantic Web: ESWC 2023 Satellite Events. ESWC 2023. Lecture Notes in Computer Science, vol 13998. Springer, Cham. https://doi.org/10.1007/978-3-031-43458-7_4
Download citation
DOI: https://doi.org/10.1007/978-3-031-43458-7_4
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-43457-0
Online ISBN: 978-3-031-43458-7
eBook Packages: Computer ScienceComputer Science (R0)