Extending XACML profile for RBAC with semantic concepts

XACML is a widely accepted access control standard on the web. However, XACML policy files are hard to read and maintain, and quite difficult to express RBAC. In this paper, we extend XACML profile for RBAC using OWL in the motivation of simplifying policy administration with semantic concepts, and better synergy between XACML and RBAC. First we partly support RBAC policy of XACML with OWL. Then, we show how to use an OWL-DL reasoner to help XACML PDP to make access control decisions in the extended system architecture.