让数据使用政策可执行，解决开放数据共享中的权责难题
Open Digital Rights Enforcement Framework (ODRE): from descriptive to enforceable policies
- 将描述性政策语言与行为控制语言融合，实现策略可执行
- 提供Python和Java双版本实现，支持动态数据处理与函数评估
- 适合需要合规数据共享的科研、医疗、金融等场景
从中心化平台到去中心化数据空间，数据共享正面临严峻挑战。数据使用政策的定义在这一领域愈发关键，凸显出有效执行机制的必要性。开放数字权利语言（ODRL）是W3C标准的本体语言，用于描述数据使用策略，但缺乏内置执行能力，限制了实际应用。本文提出开放数字权利执行框架（ODRE），旨在为ODRL赋予执行能力。该框架创新性地将ODRL的描述性术语与支持行为规范的语言（如动态数据处理或函数评估）相结合，提出一种新的策略表达方式。框架包含一套策略执行算法，并提供基于Python和Java的开源实现。同时，该框架支持未来对特定领域场景的扩展。通过多项实验验证了其实现的执行能力、性能表现及可扩展性，结果均呈积极态势。文中还分析了当前ODRE、ODRL的局限性及行业挑战。
原文摘要 · Abstract (English)
From centralised platforms to decentralised ecosystems, like Data Spaces, sharing data has become a paramount challenge. For this reason, the definition of data usage policies has become crucial in these domains, highlighting the necessity of effective policy enforcement mechanisms. The Open Digital Rights Language (ODRL) is a W3C standard ontology designed to describe data usage policies, however, it lacks built-in enforcement capabilities, limiting its practical application. This paper introduces the Open Digital Rights Enforcement (ODRE) framework, whose goal is to provide ODRL with enforcement capabilities. The ODRE framework proposes a novel approach to express ODRL policies that integrates the descriptive ontology terms of ODRL with other languages that allow behaviour specification, such as dynamic data handling or function evaluation. The framework includes an enforcement algorithm for ODRL policies and two open-source implementations in Python and Java. The ODRE framework is also designed to support future extensions of ODRL to specific domain scenarios. In addition, current limitations of ODRE, ODRL, and current challenges are reported. Finally, to demonstrate the enforcement capabilities of the implementations, their performance, and their extensibility features, several experiments have been carried out with positive results.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。