PACLP: a fine-grained partition-based access control policy language for provenance

TL;DR

This paper introduces PACLP, a novel language for fine-grained access control of provenance data using graph segments and regular expressions, enabling targeted data retrieval and restrictions.

Contribution

It presents a new approach to provenance access control by segmenting provenance graphs and applying regular expressions for precise data access management.

Findings

Enables partial graph retrieval for access requests

Uses segments as restrictions to filter targeted data

Introduces a language for fine-grained provenance access control

Abstract

Even though the idea of partitioning provenance graphs for access control was previously proposed, employing segments of the provenance DAG for fine-grained access control to provenance data has not been thoroughly explored. Hence, we take segments of a provenance graph, based on the extended OPM, and defined use a variant of regular expressions, and utilize them in our fine-grained access control language. It can not only return partial graphs to answer access requests but also introduce segments as restrictions in order to screen targeted data.