Ontology Version: 3.1.0

cacontology-enterprises:IdentityCorrelationAnalysis leaf node


URI

https://cacontology.projectvic.org/extremist-enterprises#IdentityCorrelationAnalysis

Label

Identity Correlation Analysis

Description

Analysis correlating multiple accounts and identities across platforms to establish single individual control.

Usage

Instances of cacontology-enterprises:IdentityCorrelationAnalysis can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE

Property Shapes

By the associated SHACL property shapes, instances of cacontology-enterprises:IdentityCorrelationAnalysis can have the following properties:

PROPERTY PROPERTY TYPE DESCRIPTION MIN MAX VALUE TYPE OTHER CONSTRAINTS GLOBAL RANGE
cacontology-enterprises:IdentityCorrelationAnalysis
cacontology-enterprises:identityCorrelationAccuracy owl:DatatypeProperty Accuracy level of identity correlation across platforms (0.0-1.0).
sh:message Identity correlation accuracy must be between 0.0 and 1.0.
0 1 xsd:decimal
sh:minInclusive 0.0
sh:maxInclusive 1.0
xsd:decimal
cac-core:Event
(cacontology-forensics:examinedBy | cacontology-forensics:performedBy | cacontology-forensics:witnessedBy | cacontology-forensics:authorizedBy) --
sh:message Every forensic event must have at least one participant (gUFO participation)
1 * --
(cacontology-grooming:targetsVictim | cacontology-grooming:performedBy | cacontology-grooming:witnessedBy | cacontology-grooming:facilitatedBy) --
sh:message Every grooming event must have at least one participant (gUFO participation)
1 * --
(cacontology-usa-federal:prosecutedBy | cacontology-usa-federal:investigatedBy | cacontology-usa-federal:defendedBy | cacontology-usa-federal:victimizedBy) --
sh:message Every federal criminal event must have at least one participant
1 * --
(gufo:hasBeginPointInXSDDateTimeStamp | cacontology-enterprises:hasCoercionEventBeginDate | cacontology-enterprises:hasInvestigationBeginDate) --
sh:message gUFO Events must have at least one temporal beginning point.
1 * --
gufo:hasBeginPointInXSDDateTimeStamp -- begin time
Optional temporal begin point for the event.
sh:message Event can have at most one begin point; Forensic action must have at most one begin timestamp (gUFO temporal constraint); Grooming behavior must have at most one begin timestamp (gUFO temporal); Production event must have exactly one begin point.
1 1 xsd:dateTimeStamp --
gufo:hasEndPointInXSDDateTimeStamp -- end time
Optional temporal end point for the event.
sh:message Event can have at most one end point; Forensic action must have at most one end timestamp (gUFO temporal constraint); Grooming behavior must have at most one end timestamp (gUFO temporal); Production event may have an end point.
0 1 xsd:dateTimeStamp --
rdfs:label -- label
Every event should have at least one human-readable label.
1 * xsd:string --
cac-core:InvestigativeAction
gufo:hasBeginPointInXSDDateTimeStamp -- begin time
0 1 xsd:dateTimeStamp --
gufo:hasEndPointInXSDDateTimeStamp -- end time
0 1 xsd:dateTimeStamp --
rdfs:label -- label
1 * xsd:string --
case-investigation:InvestigativeAction
uco-action:endTime --
sh:message When present, action endTime should be at most one xsd:dateTime literal.
0 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:object --
sh:message Action must reference at least one object IRI.
1 * sh:IRI
sh:severity sh:Violation
--
uco-action:performer --
sh:message Action must have exactly one performer IRI.
1 1 sh:IRI
sh:severity sh:Violation
--
uco-action:result --
sh:message When present, action result values should be IRI nodes.
0 * sh:IRI
sh:severity sh:Warning
--
uco-action:startTime --
sh:message Action must have exactly one startTime (xsd:dateTime).
1 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:Action
uco-action:endTime --
sh:message When present, action endTime should be at most one xsd:dateTime literal.
0 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:object --
sh:message Action must reference at least one object IRI.
1 * sh:IRI
sh:severity sh:Violation
--
uco-action:performer --
sh:message Action must have exactly one performer IRI.
1 1 sh:IRI
sh:severity sh:Violation
--
uco-action:result --
sh:message When present, action result values should be IRI nodes.
0 * sh:IRI
sh:severity sh:Warning
--
uco-action:startTime --
sh:message Action must have exactly one startTime (xsd:dateTime).
1 1 xsd:dateTime
sh:severity sh:Warning
--

Implementation

@prefix cac-core: <https://cacontology.projectvic.org/core#> .
@prefix cacontology-enterprises: <https://cacontology.projectvic.org/extremist-enterprises#> .
@prefix gufo: <http://purl.org/nemo/gufo#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
cacontology-enterprises:IdentityCorrelationAnalysis a gufo:EventType,
        owl:Class ;
    rdfs:label "Identity Correlation Analysis"@en ;
    rdfs:comment "Analysis correlating multiple accounts and identities across platforms to establish single individual control."@en ;
    rdfs:subClassOf cac-core:Event,
        cacontology-enterprises:CrossPlatformEvidenceCorrelation .