# Trusted Data Access Control Based on Logistics Business Collaboration Semantics
## 4 Construction of Access Control Model
### Logistics Business Collaboration Ontology  
The ontology based on logistics business collaboration is constructed with organically combining the logistics domain ontology and the access control ontology. This ontology serves multiple purposes: firstly, the logistics domain ontology is designed to support data access and querying by providing a semantic model for OBDA, which is helpful to solve semantic problems in data access, integration, and querying; secondly, the access control ontology strengthens the data access control policies to ensure that only authorized users can access specific information. This combination enables controllable fine-grained data access in logistics business collaboration, while solving the semantic interoperability problem between heterogeneous subjects. In our model, the individual classes and hierarchical structure in the constructed ontology are shown in Figure 3. In addition, we use object attributes in OWL to map relationships between entities, some of which are shown in Table 2. The details of the ontology are shown below:  
Figure 3: Logistics business collaboration ontology. The property of the access subject is defined as the subject attribute class, which is used to describe the characteristics of the access subject. The role classes are designed under the access subject attributes to represent the access subject roles. According to the functional architecture of the general logistics process, the role class is divided into supplier, forwarder, third-party logistics, carrier, warehouseman, quality inspector, logistics courier, and consignee, which are corresponding to the supplier role class, forwarder role class, third party logistics role class, carrier role class, warehouseman role class, quality inspector role class, logistics courier role class, and consignee role class, respectively. The property of the accessing object is defined as the object attribute class, which is used to describe the characteristics of accessing object. The collection of attributes of accessing objects are mainly gathering from the types of resources within general logistics enterprises. During the modeling process, the attributes of the accessing object are divided into seven subcategories, namely personnel, settlement method, goods, expenses, transportation, address, and waybill, which are corresponding to the classes of personnel, settlement method, goods, expenses, transportation, address, and waybill, respectively. Furtherly, the personnel category includes four subcategories, namely carrier information, consignee personal information, cargo owner personal information, and driver information. The settlement method class is further divided into subcategories of the transit fee settlement method class, commission settlement method class, advance payment fee settlement method class, receiving fee settlement method class, freight settlement method class, and delivery fee settlement method class. The cost category is divided into 25 subcategories, namely the transit fee category, agency fee category, receipt fee category, deduction fee category, receiving fee category, pick-up fee category, cash fee category, delivery fee category, total freight fee category, standard freight fee category, front freight fee category, rear freight fee category, insurance fee category, agency fee category, premium fee category output value expenses, prepaid expenses, total withdrawal expenses, total cash expenses, total monthly settlement expenses, total receipt expenses, commission expenses, and price difference expenses. The transportation category also consists of vehicle information subcategory, transportation mode subcategory, and transportation route subcategory. The address class is divided into the receiving address class, shipping address class, and transit location class. The class of environment attribute ontology represents the physical environment where the subject operates, describing the environmental characteristics that the subject needs to comply with when accessing the target object.