1. AIR Policy Language Overview V2

2. AIR Facts AIR -- Accountability In RDF a policy language for dependency tracking represented in Turtle (an RDF syntax) + quoting (N3 logic) based on AMORD (a production-rule system) –pattern matching (rete algorithm on RDF graph) –nesting of rules -- expressive –integrated explanation –goal direction -- efficient execution

3. Source: http://dig.csail.mit.edu/TAMI/2007/amord/air (out dated)http://dig.csail.mit.edu/TAMI/2007/amord/air AIR Vocabulary Abstract-actionAbstract-container Abstract-ruleAbstract-assertion Policy Belief-rule Goal-rule Hidden-rule Belief Goal Graph Pattern Variable Justification Contradiction Abstract-action label rdfs:Literal justification Abstract-container variable Variable rule Belief-rule goal-rule Goal-rule assertion Belief goal-assertion Goal assert Pattern assert-goal Pattern Abstract-rule pattern Pattern matched-graph Variable description Justification rule-id Abstract-rule antecedent Graph Abstract-assertion statement Pattern rdfs:Resource is-variable xsd:boolean compliant-with Policy non-compliant-with Policy ? air:alt

4. 1.:DIGPolicy a air:Policy; 2. air:variable :REQ, :REQUESTER, :RESOURCE, :MEMBERLIST; 3. air:rule [ 4. air:label "DIG policy"; 5. air:pattern { 6. :REQ a air:Request; 7. foaf:openid :REQUESTER; 8. air:resource :RESOURCE. 9. :DIG foaf:member :MEMBERLIST. 10. }; 11. air:rule [ 12. air:variable :MEMBER; 13. air:label "Member access"; 14. air:pattern { 15. :MEMBER air:in :MEMBERLIST. 16. :MEMBER a foaf:Person; 17. foaf:openid :REQUESTER. 18. }; 19. air:assert { :REQ air:compliant-with :DIGPolicy } 20. ]; 21. air:rule [ 22. air:variable :MEMBER, :FOAF-REQ; 23. air:label "Member referral access"; 24. air:pattern { 25. :MEMBER air:in :MEMBERLIST. 26. :MEMBER foaf:knows :FOAF-REQ. 27. :FOAF-REQ foaf:openid :REQUESTER. 28. }; 29. air:assert { :REQ air:compliant-with :DIGPolicy } 30. ] 31.]. Rule Template label variable definition (propagated variable-binding) pattern rule assert alt justification Language Constructs Policy Rule Variables Pattern Assertion AIR Specification & Example

5. Adding If-Then-Else Semantics 1.:DecAccessPolicy a air:Policy; 2. air:variable :REQ, :REQUESTER, :RESOURCE; 3. air:rule :DAP-1,:DAP-3. 4.:DAP-3 a air:BeliefRule; 5. air:variable :MEMBER, :FOAF-REQ; 6. air:pattern { 7. :MEMBER air:in :MEMBERLIST. 8. :MEMBER foaf:knows :FOAF-REQ. 9. :FOAF-REQ foaf:openid :REQUESTER. 10. }; 11. air:assert { :REQ air:compliant-with :DIGPolicy }; 12. air:alt [ air:rule :DAP-4 ].

6. Technical Issues Referencing RDF graph –rule-pattern is RDF graph pattern –assertion is RDF graph Variable within air:abstractContainer –variable scoping –variable binding scoping Rule modeling –Based on pattern matching semantics –sub-rule: air:rule –If-then-else: “air:alt –Efficiency: belief rule and goal rule

7. References J. de Kleer, J. Doyle, J. Guy L. Steele, and G. J. Sussman. AMORD Explicit Control of Reasoning. SIGPLAN Not.,12(8):116–125, 1977. http://dig.csail.mit.edu/2008/Papers/IEEE %20Policy/air-overview.pdfhttp://dig.csail.mit.edu/2008/Papers/IEEE %20Policy/air-overview.pdf