# Trusted Data Access Control Based on Logistics Business Collaboration Semantics
## 2 Related Works
### Access Control  
Access control serves as a fundamental mechanism for ensuring secure interoperability among information systems. It consists of three elements: the subject, object, and access control strategy. Of these, the access control strategy stands as the key component of access control technology. The landscape of access control mechanisms has been significantly enriched by various models, including role-based access control (RBAC) [12], attribute-based access control (ABAC) [13], scenario-based access control [14], relationship based access control [15], and so forth. Among these, the attribute-based access control (ABAC) model stands out for its flexibility and comprehensive approach to resource access control, determined by user attributes such as identity, location, time, and role. ABAC represents a functional evolution of the role-based access control (RBAC) model by integrating attributes as a mediator between resources and users [16]. This model capitalizes on the diverse attributes of both resources and users, alongside the access environment, to cater to a wide range of access requirements through a nuanced interpretation of attribute types and meanings.  
The integration of semantic techniques into ABAC began with [PERSON]'s work in 2004, extending the XACML policy language [17]. They extended the XACML context to include metadata associated with topics and objects. They modified the attribute value element (in the XA-CML policy language) using RDF assertions as the value of the attribute. In 2006, [PERSON] extended the XACML framework by adding inference engines and ontology management points to XACML, and provided corresponding prototypes [18]. In 2008, [PERSON] and [PERSON] combined semantic technology with the XACML standard to improve interoperability in data grids [19]. They adopted the same mechanism as [PERSON]'s approach to handle access requests, using an OWL ontology and SWRL [20] rules to extend the attribute list provided by users in access requests. In 2010, [PERSON] extended the XACML architecture by adding an ontology management system [21]. He used the XACML policy language and XACML combination algorithm to standardize access control policies and resolve policy conflicts, respectively, and changed the policy language to SWRL to enhance the expressive power of policy specifications. Unlike [PERSON]'s approach, [PERSON]'s approach can make access decisions faster.  
Meanwhile, researchers have also noticed the relationship in specific scenarios: in particular, enriching role-based access control, the research on semantic web technology based on [PERSON], who proposed an SBAC model to understand the semantic relationships among entities within access control domains, including users, data/resources, and actions. [PERSON] proposed an access control model and framework based on semantic business roles [22]. This model models business roles using semantic technology and combines intelligent algorithms to achieve dynamic management of permissions and intelligent allocation of roles. [PERSON] proposed a method of using semantic information to access authorization for multidomain data [23]. By establishing semantic relationships between data, access authorization for cross-domain data is achieved, improving the accuracy and efficiency of data access. [PERSON] proposed using blockchain and semantic web technology to implement smart contracts between individuals and health insurance organizations, using blockchain technology to execute and record transactions, and using semantic web technology to define the terms and conditions of smart contracts [24]. These models aim to support the definition of fine-grained access control policies, especially in sectors like healthcare, where the precision of access rights is critical.