关键词: 访问控制, 本体, 隐私保护

Abstract: Most of existing access control systems only pay attention to whether visitors are legal, without considering whether the privacy information of visitors is disclosed too much. If someone’s privacy information is purposefully acquired, he may encounter threats or fraud, but this is difficult to be recognized and blocked by traditional access control system. In order to solve the problem, this paper proposes an ontology based access control system that can protect user’s privacy information. The system has a privacy ontology, which not only quantifies the degree of privacy disclosure, then makes decisions from the perspective of privacy protection, but also provides the possibility of reasoning and eliminating redundancy for access control rules. This system allows user to protect his privacy information from two aspects：defining threshold and defining rules, which is flexible and friendly. Experimental results show that the access control system proposed in this paper can achieve the purpose of protecting user privacy.

Key words: access control, ontology, privacy protection