Purpose based access control of complex data for privacy protection

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2005, Pages 102-110

  Byun, Ji Won ^a   Bertino, Elisa ^a   Li, Ninghui ^a  

^a Purdue University   (United States)

Author keywords

Access Control; Privacy; Private Data Management; Purpose; Role Attributes

Indexed keywords

ACCESS CONTROL; PRIVACY; PRIVATE DATA MANAGEMENT; PURPOSE; ROLE ATTRIBUTES;

CONTROL SYSTEM ANALYSIS; DATA REDUCTION; RELATIONAL DATABASE SYSTEMS; SECURITY OF DATA; XML;

DATA PRIVACY;

EID: 30644474612     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1063979.1063998     Document Type: Conference Paper

References (18)

1. Rakesh Agrawal, Jerry Kiernan, Ramakrishman Srikant, and Yirong Xu. Hippoeratic databases. In The 28th International Conference on Very Large Databases (VLDB), 2002.
2. David Bell and Leonard LaPadula. Secure computer systems: mathematical foundations and model. Technical report, MITRE Corporation, 1974.
3. Jiwon Byun, Elisa Bertino, and Ninghui Li. Purpose-based access control for privacy protection in relational database systems. Technical Report, 2004-52, Purdue University, 2004.
4. Fang Chen and Ravi Sandhu. Constraints for role-based access control. In the first ACM Workshop on Role-based access control, 1996.
5. Federal Trade Cornmision. Children's online privacy protection act of 1998. Available at www.cdt.org/legislation/105th/privacy/coppa.html.
6. Dorothy Denning, Teresa Lunit, Roger Schell, William Shockley, and Mark Heckman. The seaview security model. In The IEEE Symposium on Research in Security and Privacy, 1998.
7. Cheh Goh and Adrian Baldwin. Towards a more complete model of role. In The 3rd ACM workshop on Role-based access control. 1998.
8. IBM. The Enterprise Privacy Authorization Language (EPAL). Available at www.zurich.ibm.com/security/enterprise-privacy/epal.
9. Arun Kumar, Neeran Karnik, and Girish Chafle. Context sensitivity in role-based access control. In ACMSIG OPS Operating Systems Review, July 2002.
10. Kristen LeFevre, Rakesh Agrawal, Vuk Ercegovac, Raghu Ramakrishnan, Yirong Xu, and David DeWitt. Disclosure in hippocratic databases. In The 30th International Conference on Very Large Databases (VLDB), August 2004.
11. United State Department of Health. Health insurance portability and accountability act of 1996. Available at www.hep-c-alert.org/links/hippa.html.
12. United State Department of Justice. The federal privacy act of 1974. Available at www.usdoj.gov/foia/privstat.htm.
13. Fausto Rabitti, Elisa Bertino, Won Kim, and Darrell Woelk. A model of authorization for next-generation database systems. In ACM Transactions on Database Systems (TODS), March 1991.
14. Ravi Sandhu. Role hierarchies and constraints for lattice-based access control. In the European Symposium on Research in Computer Security, 1996.
15. Ravi Sandhu and Fang Chen. The multilevel relational data model. In ACM Transaction on Information and System Security, 1998.
16. Ravi Sandhu, David Ferraiolo, and Richard Kuhn. The nist model for role-based access control: Towards a unified standard. In the fifth ACM workshop on Role-based access control, 2000.
17. Ravi Sandhu and Sushil Jajoclia. Toward a multilevel secure relational data model. In ACM International Conference on Management of Data (SIGMOD), 1991.
18. World Wide Web Consortium (W3C). Platform for Privacy Preferences (P3P). Available at www.w3.org/P3P.