Using Chinese Natural Language to Configure Authorization Policies in Attribute-Based Access Control System

In recent years, attribute-based access control (ABAC) is more and more popular because of its flexibility and fine-grained data management. However, manually configuring authorization policies in ABAC system is a time-consuming, labor-intensive, and tedious work. Many researchers explore the ways of automatically configuring authorization policies by parsing requirement specifications that are expressed in natural language. Previous works only focus on English and ignore the semantics of comparative relationship. In this paper, we propose a method based on Chinese including procedures of key words extraction, tag alignment and expression transformation. It can parse Chinese sentence into constraint expressions and authorization sign, by which ABAC system is able to configure authorization policies automatically. Our evaluation results show that it has good performance not only in the independent tests on each procedure but also in the systematic tests on the whole method.