E-P3P privacy policies and privacy authorization

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue WORKSHOP, 2002, Pages 103-109

  Ashley, Paul ^b   Hada, Satoshi ^b   Karjoth, Günter ^a   Schunter, Matthias ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

^b NONE

Author keywords

E P3P; Privacy Manager; Privacy Policies

Indexed keywords

DATA FLOW ANALYSIS; INFORMATION SCIENCE; SEMANTICS;

PRIVACY AUTHORIZATION;

DATA PRIVACY;

EID: 0037703469     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/644527.644538     Document Type: Conference Paper

References (13)

1. I. 9075:1992. Information technology - database languages - sql, 1992. ISO Standard.
2. P. Ashley, M. Schunter, and C. Powers. From privacy promises to privacy management - a new approach for enforcing privacy throughout an enterprise. In ACM New Security Paradigms Workshop (NSPW2002), page to appear, Virginia Beach, VA, USA, Oct. 2002. ACM Press. To appear.
3. C. Bettini. Obligation monitoring in policy management. In 3rd International IEEE Workshop on Policies for Distributed Systems and Networks (Policy 2002), pages 2-12, Monterey CA, June 2002.
4. P. Bonatti, E. Damiani, S. D. C. di Vimercati, and P. Samarati. A component-based architecture for secure data publication. In 17th Annual Computer Security Applications Conference, 2001.
5. S. Fischer-Hübner. IT-Security and Privacy: Design and Use of Privacy-Enhancing Security Mechanisms. Number 1958 in Lecture Notes in Computer Science (LNCS). Springer Verlag, Berlin, 2001.
6. S. Jajodia, P. Samarati. M. L. Sapino, and V. Subrahmanian. Flexible support for multiple access control policies. ACM Transactions on Database Systems, 26(4):216-260, June 2001.
7. G. Karjoth and M. Schunter. A privacy policy model for enterprises. In 15th IEEE Computer Security Foundations Workshop, pages 271-281. IEEE Computer Society Press, 2002.
8. G. Karjoth, M. Schunter, and M. Waidner. The Platform For Enterprise Privacy Practices Privacy-enabled Management Of Customer Data. In Proceedings of the Privacy Enhancing Technologies Conference, page to appear, San Francisco, CA, April 14-15 2002.
9. M. Kudo and S. Hada. XML document security based on provisional authorizations. In 7th ACM Conference on Computer and Communications Security, pages 87-96. ACM Press, 2000.
10. OASIS, eXtensible Access Control Markup Language (xacml), 2002. Available at www.oasis-open.org/committees/xacml.
11. M. Schunter and E. Van Herreweghen. Enterprise privacy practices vs. privacy promises - how to promise what you can keep. Research Report RZ 3452 (# 93771), IBM Research, Sept. 2002.
12. W3C. Platform for Privacy Preferences. Available at www.w3.org/P3P.
13. W3C. A P3P Preference Exchange Language 1.0 (APPEL1.0), 2002. Available at www.w3.org/TR/P3P-preferences.