2. The computer implemented method of claim 1 , further comprising: receiving an authorization query, the authorization query comprising an asset instance; and determining an access authorization based on the authorization query and the evaluation of the access control statement.
8. The computer implemented method of claim 2 , wherein the evaluating comprises determining whether the access control statement is semantically equivalent to the authorization query.