Abstract: The access control model widely used in the application software can’t dynamically change the resource access permissions according to the user-context.This paper proposed a semantic-based access control approach which rea-lizes the dynamic authorizing to users.Firstly,we proposed a user model and a resource model based on semantic information,built the foundation ontology for the user model and the resource model,then defined a set of semantic rules and inference rules,and designed a decision algorithm based on semantic reasoning process.The process of the approach is that receiving and analyzing access requests,obtaining the related user information from the ontology knowledge accor-ding to the semantic rules,and invoking the decision algorithm to generate the final recommended results.Finally,a case of comprehensive disaster reduction system was studied to validate the effectiveness of the approach.

Key words: Access control,Context,Inference rule,Ontology