TY - GEN
T1 - Maintaining privacy on derived objects
AU - Zannone, N.
AU - Jajodia, S.
AU - Massacci, F.
AU - Wijesekera, D.
PY - 2005
Y1 - 2005
N2 - Protecting privacy means to ensure users that access to their personal data complies with their preferences. However, information can be manipulated in order to derive new objects that may disclose part of the original information. Therefore, control of information flow is necessary for guaranteeing privacy protection since users should know and control not only who access their personal data, but also who access information derived from their data. Actually, current approaches for access control do not provide support for managing propagation of information and for representing user preferences. This paper proposes to extend the Flexible Authorization Frame-work (FAF) in order to automatically verify whether a subject is entitled to process personal data and derive the authorizations associated with the outcome of data processing. In order to control information flow, users may specify the range of authorizations that can be associated with objects derived from their data. The frame-work guarantees that every "valid" derived object does not disclose more information than users want and preserves the permissions that users want to maintain. To make the discussion more concrete, we illustrate the proposal with a bank case study. Copyright 2005 ACM.
AB - Protecting privacy means to ensure users that access to their personal data complies with their preferences. However, information can be manipulated in order to derive new objects that may disclose part of the original information. Therefore, control of information flow is necessary for guaranteeing privacy protection since users should know and control not only who access their personal data, but also who access information derived from their data. Actually, current approaches for access control do not provide support for managing propagation of information and for representing user preferences. This paper proposes to extend the Flexible Authorization Frame-work (FAF) in order to automatically verify whether a subject is entitled to process personal data and derive the authorizations associated with the outcome of data processing. In order to control information flow, users may specify the range of authorizations that can be associated with objects derived from their data. The frame-work guarantees that every "valid" derived object does not disclose more information than users want and preserves the permissions that users want to maintain. To make the discussion more concrete, we illustrate the proposal with a bank case study. Copyright 2005 ACM.
UR - https://www.scopus.com/pages/publications/33746762356
UR - https://www.scopus.com/pages/publications/33746762356#tab=citedBy
U2 - 10.1145/1102199.1102202
DO - 10.1145/1102199.1102202
M3 - Conference contribution
T3 - WPES'05: Proceedings of the 2005 ACM Workshop on Privacy in the Electronic Society
SP - 10
EP - 19
BT - WPES'05: Proceedings of the 2005 ACM Workshop on Privacy in the Electronic Society
PB - Association for Computing Machinery
T2 - WPES'05: 2005 ACM Workshop on Privacy in the Electronic Society
Y2 - 7 November 2005 through 7 November 2005
ER -