New Semantics Improves Confidentiality-Preserving Query Answering in DL Ontologies

Lorenzo Marconi, Daniela Rieti, Riccardo ROsati· July 21, 2026 View original

Summary

This research introduces a new semantics for Controlled Query Evaluation (CQE) called Minimal Policy Violation (MPV), which offers tractable query answering under epistemic confidentiality policies in Description Logic (DL) ontologies. MPV provides a sound approximation of existing semantics, satisfies indistinguishability, and achieves polynomial time complexity for DL-Lite_R ontologies.

Controlled Query Evaluation (CQE) is a declarative method for ensuring data access adheres to confidentiality policies, particularly within Description Logic (DL) ontologies where policies are expressed via Epistemic Dependencies (EDs). Previous studies showed that query answering under established CQE semantics (GA- and IGA-entailment) is computationally intractable for DL-Lite_R TBoxes, and IGA semantics also failed to satisfy the crucial indistinguishability property for confidentiality preservation. To address these challenges, researchers propose a new CQE semantics based on the concept of Minimal Policy Violation (MPV). This novel approach aims to provide computationally easier and confidentiality-preserving forms of CQE. The MPV semantics is demonstrated to be a sound approximation of prior semantics and, importantly, satisfies the indistinguishability property, ensuring that sensitive information cannot be inferred even by observing query results. Furthermore, for DL-Lite_R ontologies, query entailment under MPV semantics can be decided in polynomial time concerning data complexity, a significant improvement in tractability. A software implementation of this framework has been developed and evaluated, confirming its feasibility using an existing OWL 2 QL benchmark. This work offers a practical path toward more secure and efficient data access in knowledge-based systems.

Why it matters

Professionals managing sensitive data in knowledge graphs or semantic systems can leverage this research to implement more efficient and provably secure data access policies, ensuring confidentiality without sacrificing query performance.

How to implement this in your domain

  1. 1Assess current data access policies and their computational overhead in knowledge-based systems.
  2. 2Investigate the applicability of Description Logic ontologies for formalizing confidentiality policies.
  3. 3Explore the MPV semantics for Controlled Query Evaluation to enhance data security and query tractability.
  4. 4Pilot the new framework in a non-production environment to evaluate its performance and confidentiality guarantees.
  5. 5Collaborate with security and data governance teams to integrate these advanced techniques into compliance strategies.

Who benefits

HealthcareBFSIGovernmentDefenseLegal

Key takeaways

  • Existing CQE semantics for DL ontologies are computationally intractable and may lack confidentiality properties.
  • The new MPV semantics offers tractable query answering under epistemic confidentiality policies.
  • MPV satisfies the critical indistinguishability property, enhancing data security.
  • Query entailment under MPV is polynomial time in data complexity for DL-Lite_R ontologies.

Original post by Lorenzo Marconi, Daniela Rieti, Riccardo ROsati

"arXiv:2607.16715v1 Announce Type: new Abstract: We study Controlled Query Evaluation (CQE), a declarative approach to confidentiality-preserving data access, in the context of Description Logic (DL) ontologies, and for confidentiality policies expressed through Epistemic Dependen…"

View on X

Originally posted by Lorenzo Marconi, Daniela Rieti, Riccardo ROsati on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses