System and method for information sharing across security boundaries

• US 20100049687A1
• Filed: 08/19/2009
• Published: 02/25/2010
• Est. Priority Date: 08/19/2008
• Status: Active Grant

• Current Assignee: Northrop Grumman Systems Corporation (Northrop Grumman Corporation)
• Original Assignee: Northrop Grumman Information Technology Incorporated (Northrop Grumman Corporation)
• Inventors: Thurn, Martin, Patten, Terry
• Granted Patent: US 8,589,333 B2
• Time in Patent Office: Days
• US Class Current: 706/47
• CPC Class Codes: G06N 5/02 Knowledge representation; Symbolic representation
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A system and method for sharing information across security boundaries including a server for sharing information between networks. The method for includes receiving data structured as semantic statements, retrieving a set of rules and ontology, processing a semantic statement from data with rules and ontology, determining whether the semantic statement is consistent with rules and ontology, and determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent. The method further includes removing the fact that gives rise to the inconsistency and releasing data when the semantic statement is consistent with rules and ontology.

Claims

1. A system for sharing information across security boundaries comprising:

a server for sharing information between networks comprising;

a processor;

a memory, wherein the memory includes instructions for;

receiving data structured as semantic statements;

retrieving a set of rules and ontology;

processing a semantic statement from data with rules and ontology;

determining whether the semantic statement is consistent with rules and ontology;

determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent;

removing the fact that gives rise to the inconsistency; and

releasing data when the semantic statement is consistent with rules and ontology.

2. The system of claim 1, further comprising:

repeating determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until the semantic statement is consistent.

3. The system of claim 1, the instructions further comprising instructions for:

determining whether there is an additional semantic statements;

if there are additional semantic statements, repeating the determining whether the semantic statements s consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency for the additional semantic statements until no semantic statements remain.

4. The system of claim 1, wherein the server further includes a theorem prover to determine the consistency of the semantic statements with rules and ontology.

5. The system of claim 4, wherein said theorem prover is an OWL (Web Ontology Language) reasoner, said data is represented in RDF (Resource Description Framework), and said rules and ontology are represented as an OWL ontology.

6. The system of claim 1, wherein releasing the data further comprises releasing a reference to original sources from which the data was derived.

7. The system as in claim 1, further comprising a one-way-transfer mechanism for increasing the assurance of said server when sharing information across security boundaries.

8. The system as in claim 1, further comprising a means for detecting incorrect security labels on data.

9. The system as in claim 1, further comprising an information-extraction mechanism for extracting said data from unstructured text.

10. A system for sharing information across security boundaries comprising:

a server for sharing information between networks comprising;

a processor;

a memory, wherein the memory includes instructions for;

receiving data structured as semantic statements;

retrieving a set of rules, ontology and aggregation history;

processing a semantic statement from data with rules, ontology and aggregation history;

determining whether the semantic statement is consistent with rules, ontology, and aggregation history;

determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent;

removing the fact that gives rise to the inconsistency; and

releasing data when the semantic statement is consistent with rules, ontology, and aggregation history.

11. The system of claim 10, further comprising:

repeating determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until the semantic statement is consistent.

12. The system of claim 10, further comprising:

determining whether there are any additional semantic statements;

if there are additional semantic statements, repeating the processing a semantic statement from data with rules and ontology, determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency for the additional semantic statements until no semantic statements remain.

13. A method for sharing information across security boundaries comprising:

receiving data structured as semantic statements;

retrieving a set of rules and ontology;

processing a semantic statement from data with rules and ontology;

determining whether the semantic statement is consistent with rules and ontology;

determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent;

removing the fact that gives rise to the inconsistency; and

releasing data when the semantic statement is consistent with rules and ontology.

14. The method of claim 13, further comprising:

repeating determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until the semantic statement is consistent.

15. The method of claim 13, further comprising:

determining whether there are any additional semantic statements;

repeating, if there are additional semantic statements, processing a semantic statement from data with rules and ontology, determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until no semantic statements remain.

16. The method of claim 15, further comprising applying filters to semantic statements.

17. The method of claim 15, wherein releasing the data further comprises releasing a reference to original sources from which the data was derived.

18. A method for sharing information across security boundaries comprising:

receiving data structured as semantic statements;

retrieving a set of rules and ontology;

retrieving aggregation history;

processing a semantic statement from data with rules, ontology and aggregation history;

determining whether the semantic statement is consistent with rules, ontology, and aggregation history;

determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent;

removing the fact that gives rise to the inconsistency; and

releasing data when the semantic statement is consistent with rules, ontology, and aggregation history.

19. The method of claim 18, further comprising:

repeating determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until the semantic statement is consistent.

20. The method of claim 18, further comprising:

determining whether there are any additional semantic statements;

repeating, if there are additional semantic statements, processing a semantic statement from data with rules and ontology, determining whether the semantic statement is consistent with rules and ontology, determining a fact that gives rise to an inconsistency if the semantic statement is inconsistent, and removing the fact that gives rise to the inconsistency until no semantic statements remain.