13. The system of claim 12 , wherein the authorization control engine and authorization checkpoint are part of a semanontology system for determining access authorization.
12. A system for determining access authorization, comprising: a bus; persistent storage connected to the bus; a memory connected to the bus, wherein the memory has program code stored therein; a communications unit connected to the bus; a processor unit connected to the bus, wherein the processor unit executes the program code stored in the memory to direct the system to create: an authorization control engine that evaluates a semantic ontology expression and a structural expression contained within an access control statement for determining authorization request validity using the authorization control engine for an asset, defining the access control statement for the asset, wherein the access control statement comprises a first portion comprising one or more of a structural expression, and a conditional expression wherein the structural expression defines fixed relationships of the asset and a second portion comprising one or more of a classification expression comprising ontology expressions; and an authorization checkpoint communicatively coupled to the authorization control engine that restricts access until authorization is determined.