Specifying privacy policies with P3P and EPAL: Lessons learned

WPES'04: Proceedings of the 2004 ACM Workshop on Privacy in the Electronic Society

Volumn , Issue , 2004, Pages 35-36

  Stufflebeam, William H ^a   Antón, Annie I ^a   He, Qingfeng ^a   Jain, Neha ^a  

^a North Carolina State University   (United States)

Author keywords

EPAL; Healthcare; P3P; Policy Specification; Privacy; Requirements Engineering

Indexed keywords

EPAL; P3P; POLICY SPECIFICATION; PRIVACY; SECURITY AND PRIVACY REQUIREMENTS ANALYSIS TOOL (SPRAT);

COMPUTER HARDWARE DESCRIPTION LANGUAGES; DATA REDUCTION; HEALTH CARE; INTERNET; LARGE SCALE SYSTEMS; LEARNING SYSTEMS; NATURAL LANGUAGE PROCESSING SYSTEMS; ONLINE SYSTEMS; PROGRAM DOCUMENTATION; REQUIREMENTS ENGINEERING;

DATA PRIVACY;

EID: 20444494460     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (9)

1. [AEB04] A.I. Antón, J.B. Earp, D. Bolchini, Q. He, C. Jensen and W. Stufflebeam. The Lack of Clarity in Financial Privacy Policies and the Need for Standardization, IEEE Security & Privacy, 2(2), pp. 36-45, 2004.
2. [AER01] A.I. Antón, J.B. Earp and A. Reese, Goal Mining to Examine Health Care Privacy Policies, NCSU Technical Report TR-2001-10, 6 November 2001.
3. [AHK03] P. Ashley, S. Hada, G. Karjoth, C. Powers and M. Schunter. Enterprise Privacy Authorization Language (EPAL 1.1) Specification. IBM Research Report. http://www.zurich.ibm.com/security/enterprise-privacy/epal. 2003.
4. [CDH04] L. Cranor, B. Dobbs, G. Hogben, J. Humphrey, M. Langheinrich, M. Marchiori, M. Presler-Marshall, J. Reagle, M. Schunter, D.A. Stampley, R. Wenning. The Platform for Privacy Preferences 1.1 (P3P1.1) Specification, http://www.w3.org/TR/P3P11. W3C Working Draft 27 April 2004.
5. [Cig04a] CIGNA HealthCare. Public Online Privacy Statement. http://www.cigna.com/general/privacy/public.html. Accessed June 2004.
6. [Cig04b] CIGNA HealthCare. Notice of Privacy Practices. http://www.cigna.com/general/privacy/healthcare/standard.html. Accessed June 2004.
7. [JAS04] N. Jain, A.I. Antón, W.H. Stufflebeam and Q. He. Security and Privacy Requirements Analysis Tool (SPRAT) Software Requirements Specification, NCSU CSC Technical Report TR-2004-7, February 24, 2004.
8. [RR99] S. Robertson and J. Robertson. Mastering the Requirements Process. Addison-Wesley. New York, 1999.
9. [SAH04] William H. Stufflebeam, Annie I. Antón, Qingfeng He, and Neha Jain. Specifying Privacy Policies with P3P and EPAL: Lessons Learned. NCSU Technical Report #TR-2004-19. June 17, 2004.