$Id: PolicyModel.owl,v 1.2 2004/02/05 16:18:21 hugo Exp $
Compiled by Massimo Paolucci, Naveen Srinivasan and Katia Sycara. Carnegie Mellon University
The Policy Model focuses on those aspects of the architecture that
relate to policies and, by extension security and quality of
service.
has_a
a policy may define a capability
constraints
a policy is a constraint on the allowable actions or states of an agent or person or organization
(interpreted as: a policy constraints the actions performed by an
agent)
control
A permission guard controls one or more resources
has_a
a policy description describes a policy
has_a
a policy description describes a policy
monitor
a permission may enable one or more actions
monitor
a permission may enable one or more allowable states
enforce
A permission guard is a mechanism that enforces permissive policies
has_a
A policy guard has an owner responsible for establishing the guard.
has_identifier
A policy may have an identifier.
member_of
A person or organization belongs to a domain.
monitor
An audit guard may monitor one or more resources (2.3.4.1.2)
owner
A person or organization may be the owner of an agent.
define
A domain defines the scope of application of zero or more policies.
Audit_Guard
An audit guard is a mechanism used on behalf of an owner that monitors actions and agents to verify the satisfaction of obligations
An audit guard is a policy guard.
Domain
A domain is a set of agents and/or resources that is subject to
constrains of one or more policies.
Obligation
An obligation is a kind of policy that prescribes actions and/or states of an agent and/or resource.
An obligation of a type of policy
Permission
A permission is a kind of policy that relates to the allowed
actions and states of an agent and/or resource. (2.3.4.5.1)
An obligation of a type of policy (2.3.4.5.2)
Permission_Guard
A permission guard is a mechanism deployed on behalf of an owner
that enforces permission policies.
A permission guard is a policy guard
Person_or_Organization
A person or organization may be the owner or agents that provide
or request Web services.
Policy
A policy is a constraint on the behavior of agents.
Policy_Description
A policy description is a machine-processable description of a policy or set of policies
Policy_Guard
A policy guard is a mechanism deployed on behalf of an owner that
enforces a policy (or set of policies).
A policy guard is a mechanism that enforces policies. (2.3.4.9.2)