| 摘要 |
A method for controlling context awareness access in a ubiquitous environment is provided to offer a context awareness technique, and an efficient and extended access control technique using a context concept layer obtained by describing context with ontology to apply an access control technique among a security technology to a dynamic environment. Context information for a component is obtained from context infrastructure(S11). Access control of the obtained context information is evaluated(S12). It is checked whether the context information inputted for access control evaluation is directly matched with the context information used in evaluation. An authorization result is produced by performing a security policy evaluation if the content information is matched, and it is checked whether thee context needed for the evaluation is extracted from the inputted context information by using a context concept layer, an inference rule, and an inducing path if not. If the context is induced, the authorization result is produced by replacing the inputted context with the induced context and performing the security policy evaluation(S14).
|
