From centralised platforms to decentralised ecosystems, like Data Spaces, sharing data has become a paramount challenge. For this reason, the definition of data usage policies has become crucial in these domains, highlighting the necessity of effective policy enforcement mechanisms. The Open Digital Rights Language (ODRL) is a W3C standard ontology designed to describe data usage policies, however, it lacks built-in enforcement capabilities, limiting its practical application. This paper introduces the Open Digital Rights Enforcement (ODRE) framework, whose goal is to provide ODRL with enforcement capabilities. The ODRE framework proposes a novel approach to express ODRL policies that integrates the descriptive ontology terms of ODRL with other languages that allow behaviour specification, such as dynamic data handling or function evaluation. The framework includes an enforcement algorithm for ODRL policies and two open-source implementations in Python and Java. The ODRE framework is also designed to support future extensions of ODRL to specific domain scenarios. In addition, current limitations of ODRE, ODRL, and current challenges are reported. Finally, to demonstrate the enforcement capabilities of the implementations, their performance, and their extensibility features, several experiments have been carried out with positive results.
翻译:从集中式平台到去中心化生态系统(如数据空间),数据共享已成为一项至关重要的挑战。因此,在这些领域中定义数据使用策略变得至关重要,这凸显了有效策略执行机制的必要性。开放数字权利语言(ODRL)是一种用于描述数据使用策略的W3C标准本体,但其缺乏内置的执行能力,限制了其实际应用。本文介绍了开放数字权利执行(ODRE)框架,其目标是为ODRL提供执行能力。ODRE框架提出了一种表达ODRL策略的新方法,该方法将ODRL的描述性本体术语与允许行为规范(如动态数据处理或函数评估)的其他语言相结合。该框架包含一个ODRL策略执行算法以及Python和Java的两种开源实现。ODRE框架还旨在支持未来针对特定领域场景的ODRL扩展。此外,本文还报告了ODRE和ODRL的当前局限性以及面临的挑战。最后,为了展示实现的执行能力、性能及其可扩展性特性,我们进行了多项实验并取得了积极的结果。