解决数字版权策略中多维参数的歧义问题,让规则判断更准确。
Axis-Aligned Semantics for ODRL: Resolving Dimensional Ambiguity in Policy Constraints
- 将多轴参数拆解为独立轴向的标量,明确每条规则对应的具体维度。
- 在256个测试用例中验证,冲突检测准确率显著提升,无遗漏或误判。
- 适合需要精准控制内容使用权限的系统开发者和安全研究人员。
开放数字权利语言(ODRL)将策略约束表示为三元组:左操作数、运算符和值。然而,某些空间型操作数(如宽、高、深)属于多轴域,而约束语法未显式标明轴标识,导致策略引擎无法判断多个约束是否作用于同一轴或不同轴,使冲突检测不完整或不安全。本文提出轴分解方法,将多轴操作数替换为在全序域上的轴向标量操作数,使每条约束对应各轴的一个区间,每条策略则表现为轴对齐的超矩形。冲突检测转化为超矩形比较,定义了三值语义(冲突、兼容、未知),证明该方法在语义上与原ODRL一致且向后兼容。我们构建了ODRL轴对齐配置(OAAP),并在包含256个ODRL策略问题的基准上进行了验证,所有问题均以Turtle格式表达,并编译为一阶逻辑(TPTP)和SMT-LIB形式,使用Vampire、E、Z3和cvc5求解器进行测试。
原文摘要 · Abstract (English)
The Open Digital Rights Language (ODRL) represents policy constraints as triples of a left operand, an operator, and a value. Several spatial operands, however, range over multi-axis domains such as width, height, and depth, while the constraint syntax provides no explicit axis identity. As a result, policy engines cannot determine whether multiple constraints apply to the same axis or different ones, making conflict detection unsound or incomplete. We resolve this ambiguity by axis decomposition, replacing multi-axis operands with axis-specific scalar operands over totally ordered domains. Each constraint then denotes an interval per axis and each policy an axis-aligned box, reducing conflict detection to box comparison. We define a three-valued semantics (Conflict, Compatible, Unknown), prove the decomposition sound and backward compatible with ODRL, instantiate it as ODRL Axis-Aligned Profile (OAAP), and validate it on a benchmark of 256 ODRL policy problems, each expressed in Turtle and compiled to first-order (TPTP) and SMT-LIB form, using Vampire, E, Z3, and cvc5.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。