Graph Patterns in Fine-Grained Access Control for Graph-Structured Data

Daniel Schmid; Aya Mohamed; Dagmar Auer; Bahara Muradi; Josef Küng

doi:10.1007/978-3-032-02088-8_15

Graph Patterns in Fine-Grained Access Control for Graph-Structured Data

Daniel Schmid
, Aya Mohamed
, Dagmar Auer^*
, Bahara Muradi
, Josef Küng

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference proceedings › peer-review

Abstract

Due to their increasing importance also graph-structured data require advanced access control. As graph patterns are a promising approach for enforcing sophisticated, fine-grained authorization policies for graph-structured data, we start by discussing the available terms and formats. We then focus on conceptualizing and implementing graph patterns in two access control models, which represent the two alternative approaches: “pattern-first”, where the patterns are at the core of the model, and “pattern as extension”, where an existing access control model is extended to also support patterns. We compare these two approaches by analyizing the differences in pattern definition and enforcement.

Original language	English
Title of host publication	Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings
Editors	Robert Wrembel, Gabriele Kotsis, Ismail Khalil, A Min Tjoa
Place of Publication	Cham
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	212-227
Number of pages	16
Edition	1
ISBN (Electronic)	978-3-032-02088-8
ISBN (Print)	978-3-032-02087-1
DOIs	https://doi.org/10.1007/978-3-032-02088-8_15
Publication status	Published - 2026
Event	36th International Conference on Database and Expert Systems Applications, DEXA 2025 - Bangkok, Thailand Duration: 25 Aug 2025 → 27 Aug 2025

Publication series

Name	Lecture Notes in Computer Science
Volume	16047 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	36th International Conference on Database and Expert Systems Applications, DEXA 2025
Country/Territory	Thailand
City	Bangkok
Period	25.08.2025 → 27.08.2025

Fields of science

102015 Information systems
102016 IT security
102030 Semantic technologies
102022 Software development
102001 Artificial intelligence
502007 E-commerce
505002 Data protection
102010 Database systems
102035 Data science
102033 Data mining
102 Computer Sciences
506002 E-government
102019 Machine learning
102006 Computer supported cooperative work (CSCW)
102028 Knowledge engineering
202007 Computer integrated manufacturing (CIM)
102025 Distributed systems
509018 Knowledge management
102014 Information design

JKU Focus areas

Digital Transformation
Sustainable Development: Responsible Technologies and Management

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1007/978-3-032-02088-8_15

Cite this

Schmid, D., Mohamed, A., Auer, D., Muradi, B., & Küng, J. (2026). Graph Patterns in Fine-Grained Access Control for Graph-Structured Data. In R. Wrembel, G. Kotsis, I. Khalil, & A. M. Tjoa (Eds.), Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings (1 ed., pp. 212-227). (Lecture Notes in Computer Science; Vol. 16047 LNCS). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-032-02088-8_15

Schmid, Daniel ; Mohamed, Aya ; Auer, Dagmar et al. / Graph Patterns in Fine-Grained Access Control for Graph-Structured Data. Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings. editor / Robert Wrembel ; Gabriele Kotsis ; Ismail Khalil ; A Min Tjoa. 1. ed. Cham : Springer Science and Business Media Deutschland GmbH, 2026. pp. 212-227 (Lecture Notes in Computer Science).

@inproceedings{dfe5668d15944a7ea3e10185e37f571b,

title = "Graph Patterns in Fine-Grained Access Control for Graph-Structured Data",

abstract = "Due to their increasing importance also graph-structured data require advanced access control. As graph patterns are a promising approach for enforcing sophisticated, fine-grained authorization policies for graph-structured data, we start by discussing the available terms and formats. We then focus on conceptualizing and implementing graph patterns in two access control models, which represent the two alternative approaches: “pattern-first”, where the patterns are at the core of the model, and “pattern as extension”, where an existing access control model is extended to also support patterns. We compare these two approaches by analyizing the differences in pattern definition and enforcement.",

keywords = "Access Control, Authorization Policy, Fine-grained, Graph Pattern, Graph-structured Data",

author = "Daniel Schmid and Aya Mohamed and Dagmar Auer and Bahara Muradi and Josef K{\"u}ng",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.; 36th International Conference on Database and Expert Systems Applications, DEXA 2025 ; Conference date: 25-08-2025 Through 27-08-2025",

year = "2026",

doi = "10.1007/978-3-032-02088-8\_15",

language = "English",

isbn = "978-3-032-02087-1",

series = "Lecture Notes in Computer Science",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "212--227",

editor = "Robert Wrembel and Gabriele Kotsis and Ismail Khalil and Tjoa, \{A Min\}",

booktitle = "Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings",

edition = "1",

}

Schmid, D, Mohamed, A, Auer, D , Muradi, B & Küng, J 2026, Graph Patterns in Fine-Grained Access Control for Graph-Structured Data. in R Wrembel, G Kotsis, I Khalil & AM Tjoa (eds), Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings. 1 edn, Lecture Notes in Computer Science, vol. 16047 LNCS, Springer Science and Business Media Deutschland GmbH, Cham, pp. 212-227, 36th International Conference on Database and Expert Systems Applications, DEXA 2025, Bangkok, Thailand, 25.08.2025. https://doi.org/10.1007/978-3-032-02088-8_15

Graph Patterns in Fine-Grained Access Control for Graph-Structured Data. / Schmid, Daniel; Mohamed, Aya; Auer, Dagmar et al.
Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings. ed. / Robert Wrembel; Gabriele Kotsis; Ismail Khalil; A Min Tjoa. 1. ed. Cham: Springer Science and Business Media Deutschland GmbH, 2026. p. 212-227 (Lecture Notes in Computer Science; Vol. 16047 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference proceedings › peer-review

TY - GEN

T1 - Graph Patterns in Fine-Grained Access Control for Graph-Structured Data

AU - Schmid, Daniel

AU - Mohamed, Aya

AU - Auer, Dagmar

AU - Muradi, Bahara

AU - Küng, Josef

N1 - Publisher Copyright: © The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.

PY - 2026

Y1 - 2026

N2 - Due to their increasing importance also graph-structured data require advanced access control. As graph patterns are a promising approach for enforcing sophisticated, fine-grained authorization policies for graph-structured data, we start by discussing the available terms and formats. We then focus on conceptualizing and implementing graph patterns in two access control models, which represent the two alternative approaches: “pattern-first”, where the patterns are at the core of the model, and “pattern as extension”, where an existing access control model is extended to also support patterns. We compare these two approaches by analyizing the differences in pattern definition and enforcement.

AB - Due to their increasing importance also graph-structured data require advanced access control. As graph patterns are a promising approach for enforcing sophisticated, fine-grained authorization policies for graph-structured data, we start by discussing the available terms and formats. We then focus on conceptualizing and implementing graph patterns in two access control models, which represent the two alternative approaches: “pattern-first”, where the patterns are at the core of the model, and “pattern as extension”, where an existing access control model is extended to also support patterns. We compare these two approaches by analyizing the differences in pattern definition and enforcement.

KW - Access Control

KW - Authorization Policy

KW - Fine-grained

KW - Graph Pattern

KW - Graph-structured Data

UR - https://www.scopus.com/pages/publications/105014492787

U2 - 10.1007/978-3-032-02088-8_15

DO - 10.1007/978-3-032-02088-8_15

M3 - Conference proceedings

AN - SCOPUS:105014492787

SN - 978-3-032-02087-1

T3 - Lecture Notes in Computer Science

SP - 212

EP - 227

BT - Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings

A2 - Wrembel, Robert

A2 - Kotsis, Gabriele

A2 - Khalil, Ismail

A2 - Tjoa, A Min

PB - Springer Science and Business Media Deutschland GmbH

CY - Cham

T2 - 36th International Conference on Database and Expert Systems Applications, DEXA 2025

Y2 - 25 August 2025 through 27 August 2025

ER -

Schmid D, Mohamed A, Auer D , Muradi B , Küng J. Graph Patterns in Fine-Grained Access Control for Graph-Structured Data. In Wrembel R, Kotsis G, Khalil I, Tjoa AM, editors, Database and Expert Systems Applications - 36th International Conference, DEXA 2025, Proceedings. 1 ed. Cham: Springer Science and Business Media Deutschland GmbH. 2026. p. 212-227. (Lecture Notes in Computer Science). Epub 2025 Aug 18. doi: 10.1007/978-3-032-02088-8_15