What does DKAL do?

Jul 29, 2011 at 12:05 PM

Its not really clear what the core use case scenario of this API is.

Can you ellaborate?

Feb 7 at 12:19 AM
Might as well answer the question even though it is quite old.

The paper on DKAL should give the background, but one use case is to concisely express an authorization policy such that authorization decisions can be made based on that policy. Instead of hardcoding knowledge and making implicit inferences, DKAL makes explicit how agents infer knowledge. So, for instance, instead of having a program read an ACL to learn whether a user is granted access to a file, and having the decision logic be hardcoded in the program, DKAL allows the inference to be made by an engine that supplies an answer to the question of whether access is granted or not. The engine knows the policy, is given the authorization query and returns the solution. The really interesting cases are the ones where the policy is not simple and lots of inferences must be made to come up with an answer.

Whether an action is authorized or not is knowledge. DKAL makes that knowledge explicit.