Resource description framework security

A system, comprising

• a data store to store a set of resource description framework (RDF) records, where an RDF record includes a triple comprising a subject value, a predicate value, and an object value, where the predicate value describes a relationship between the subject value and the object value;
• a receipt logic to receive, from an entity, an action request associated with an RDF record;
• a security logic to generate a permission value by comparing a sensitivity label associated with the triple in the RDF record and an access label associated with the entity, where the sensitivity label is based, at least in part, on one or more of, a subject sensitivity label associated with the subject value, a predicate sensitivity label associated with the predicate value, and an object sensitivity label associated with the object value;
• and
• an action logic to selectively perform an action identified by the action request based, at least in part, on the permission value, where the action is one of, providing a portion of the RDF record to the entity from the data store, and adding the RDF record to the data store.

A system, comprising:

• means for storing a set of resource description framework (RDF) record;
• means for receiving an action request associated with an RDF record;
• and
• means for performing an action identified by the action request upon determining that a access label associated with the action request satisfies a security standard associated with the RDF record,
• where the action is one of, storing the RDF record, and providing a piece of information associated with the RDF record.

A machine-readable medium having stored thereon a data structure comprising:

• a subject field containing data representing a subject value of a triple;
• an object field containing data representing an object value of the triple;
• a predicate field containing data representing a predicate value of the triple, the predicate value describing a relationship between the subject value and the object value;
• and
• a sensitivity field containing data representing a sensitivity label derived from the subject field, the object field, and the predicate field, where the sensitivity label controls access to the triple.