DEAL: A Distributed Authorization Language for Ambient Intelligence

Authorization is still an open problem in Ambient Intelligence environments. The difficulty of implementing authorization policies lies in the open and dynamic nature of such environments. The information is distributed among various heterogeneous devices that collect, process, change and share it. Previous work presented a fully distributed approach for reasoning with conflicts in ambient intelligence systems. This paper extends previous results to address authorization issues in distributed environments. First, we present the formal high-level authorization language DEAL to specify access control policies in open and dynamic distributed systems. DEAL has rich expressive power by supporting negative authorization, rule priorities, hierarchical category authorization and nonmonotonic reasoning. Then, we define the language semantics through Defeasible Logic. Finally, we demonstrate the capabilities of DEAL in a use case Ambient Intelligence scenario regarding a hospital facility, which served as our motivation.