Semantic Enforcement of Privacy Protection Policies via the Combination of Ontologies and Rules

Abstract

We propose that the semantic formal model for P3P and EPAL-based privacy protection policies can be enforced and expressed as a variety of ontologies and rules (ontologies+rules) combinations, such as DLP, SWRL, AL-log, DL-log, DL+log, and MKNF, etc. Based on P3P and EPAL's original expressions and their dictionaries, several ontologies+rules semantic enforcement of privacy protection policies will be proposed in this study that can be compared with existing others. Furthermore, we express privacy protection management policies as a set of ontology statements, rules, and facts for both information disclosure and rights delegation using one of the above ontologies+rules combinations for two specific use case scenarios. When verifying P3P/EPAL formal semantics, we exploit which ontologies+rules combination will be a feasible information disclosure control scenario under certain conditions. We hope that this study might shed some light on the study of future general information disclosure and rights delegation controlled on the open Web environment.