A quantification model using P3P in privacy control for telecommunications service management

International Journal of Services and Standards

Volumn 1, Issue 4, 2005, Pages 426-445

  Choi, Young B ^a   Seo, Hyewon ^a   Blackburn, Jonathan M ^a  

^a JAMES MADISON UNIVERSITY   (United States)

Author keywords

Online Privacy Act of 2003; P3P; privacy control; quantification model; telecommunications service management

Indexed keywords

EID: 33745025593     PISSN: 17408849     EISSN: 17408857     Source Type: Journal    
DOI: 10.1504/IJSS.2005.007470     Document Type: Article

References (35)

1. BBB Online (2004) A Better Business Bureau Program, Retrieved 12 September, http://www.bbbonline.org/privacy/index.asp
2. Becker, S.A. (2004) ‘A usability study of internet privacy policies for state and commercial websites’, International Journal of Services and Standards, Vol. 1, No. 1, pp.52–68.
3. Cranor, L., Langheinrich, M., Marchiori, M., Presler-Marshall, M. and Reagle, J. (2002a) The Platform for Privacy Preference 1.0 (P3P1.0) Specification, Retrieved 9 October 2004, World Wide Web Consortium Website http://www.w3.org/TR/P3P/
4. Cranor, L.F., Arjula, M. and Guduru, P. (2002b) ‘Use of a P3P user agent by early adopters’, ACM Workshop on Privacy in the Electronic Society.
5. Cranor, L.F., Byers, S. and Kormann, D. (2003) An Analysis of P3P Deployment on Commercial, Government, and Children’s Websites as of May 2003, Retrieved 10 October 2004, AT&T Labs-Research Website http://www.research.att.com/projects/p3p/
6. Ernst & Young (2004a) P3P Dashboard Report, Retrieved 10 October, http://www.ey.com/global/download.nsf/US/P3P_Dashboard_-_May_2004/$file/E&YP3PDashboardMay2004.pdf
7. Ernst & Young (2004b) Workshop on Machine Readable Privacy Policies, January.
8. Frank, D. (2003) ‘OMB honing privacy guidance’, Federal Computer Week, Retrieved 12 September 2004, http://www.fcw.com/fcw/articles/2003/0310/web-guide-03–13-03.asp
9. Henderson, D.B. (2001) ‘Privacy in the information age: can legislation protect it?’, CMD-Communications Design and Management, Retrieved 18 September 2004, http://www.users.bigpond.com/sjgreenaway/DBH-2001-Paper3.pdf
10. Hochheiser, H. (2002) ‘The platform for privacy preference as a social protocol: an examination within the US policy context’, ACM Transactions on Internet Technology, November, Vol. 2, No. 4, pp.276–306, Retrieved 20 September 2004, http://delivery.acm.org/10.1145/610000/604598/p276-hochheiser.pdf?key1=604598&key2=9459436901&coll=portal&dl=ACM& CFID=8698082&CFTOKEN=57843592
11. Hogben, G. (2002) A Technical Analysis of Problems with P3P 1.0 and Possible Solutions, Retrieved 21 September 2004, Joint Research Centre Website http://www.w3.org/2002/p3p-ws/pp/jrc.html
12. Janowski, W. (2003) ‘What you should know about customer privacy management’, Gartner, November, Retrieved 15 October, Article No. R-21-1912, Gartner Advisory Intra Web Database at https://gartner.jmu.edu/research/118400/118437/118437.html
13. Jopling, E. (2003) ‘Users and vendors speak out: privacy and security’, Gartner, August, Retrieved 15 October, Article No. TELC-WW-DP_0575, Gartner Advisory Intra Web Database at https://gartner.jmu.edu/research/116500/116568/116568.html
14. Lau, A.A.M. (2003) ‘A study on direction of development of business-to-consumer m-commerce’, International Journal of Mobile Communications, Vol. 1, Nos. 1–2, pp.167–179.
15. National Institute of Standard and Technology (2004) Federal Information Processing Standards Publication 199-Standards for Security Categorization of Federal Information and Information Systems, Retrieved 2 November 2004, http://www.csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf
16. Pitzek, S. (2001) Security-Privacy on the Internet, Retrieved 25 September 2004, Institution of Technology and Information at Vienna University, Website http://www.vmars.tuwien.ac.at/courses/akti12/journal/01ws/article_01ws_Pitzek.pdf
17. Randeree, E. and Rao, H.R. (2004) ‘E-health and assurance: curing hospital websites’, International Journal of Electronic Healthcare, Vol. 1, No. 1, pp.33–46.
18. Resnick, P. and Miller, J. (1996) ‘Pics: internet access controls without censorship’, Commununication of ACM, Vol. 39, No. 10, pp.87–93, Retrieved 11 October 2004, ACM Digital Library.
19. Rezgui, A., Bouguettaya, A. and Eltoweissy, M.Y. (2003) ‘Understanding privacy: privacy on the web: facts, challenges, and solutions’, IEEE Security and Privacy, Retrieved 11 October 2004, IEEE Computer Society Digital Library.
20. Samsung (2004) SCH-A670 Series: All Digital Mobile Phone User Guide.
21. Samtani, A., Leow, T.T., Lim, H.M. and Goh, P.G.J. (2003) ‘Overcoming barriers to the successful adoption of mobile commerce in Singapore’, International Journal of Mobile Communications, Vol. 1, Nos. 1–2, pp.194–231.
22. The Metropolitan Corporate Counsel, Inc. (2004) Website Require Privacy Changes Under New California Law, Retrieved 28 September, http://web.lexis-nexis.com/universe/document?_m=d782d6a5271f48f7e066dac224205bc6&_docnum=1&wchp=dGLbVlz-zSkVb&_md5=0511fb760e6499c7c7802c2d60ea972d
23. Thibodeau, P. (2002) ‘P3P supporters struggle to increase adoption of data privacy standard: backers look for ways to overcome obstacles that are slowing deployments’, Computerworld, Vol. 36, No. 47.
24. TRUSTe (2004) TRUSTe’s Web Privacy Seal, Retrieved 17 October, http://www.truste.org/consumers/web_privacy_seal.php
25. Vijayan, J. (2004) ‘First online privacy law looms- but most companies already follow requirements of California’s AB 68, experts say’, Computerworld, Retrieved 20 October, http://www.computerworld.com/securitytopics/security/privacy/story/0,10801,94061,00.html
26. Wheatman, V. (2004) ‘Management update: the future of enterprise security’, Gartner, Retrieved 17 October, Gartner Advisory Intra Web Database
27. Wickramasinghe, N. and Misra, S.K. (2004) ‘A wireless trust model for healthcare’, International Journal of Electronic Healthcare, Vol. 1, No. 1, pp.60–77.
28. World Wide Web Consortium (1997) General Overview of the P3P Architecture, Retrieved 5 October 2004, http://www.w3.org/TR/WD-P3P-arch.html
29. World Wide Web Consortium (2002) World Wide Web Consortium Issues P3P 1.0 as a W3c Recommendation, Retrieved 5 October 2004, http://www.w3.org/2002/04/p3p-pressrelease
30. World Wide Web Consortium (2004a) P3P and Privacy Faq, Retrieved 13 October, http://www.w3.org/P3P/P3Pfrq.html
31. World Wide Web Consortium (2004b) P3P Specification Working Group List of Documents, Retrieved 20 December, http://www.w3.org/P3P/1.1/documents.html
32. Kennedy Sponsors Bill to End Wireless Spam (n.d.) Retrieved 22 September 2003, http://www.house.gov/apps/list/press/ri01_kennedy/pr030516ws.html
33. Privacy Compliance Resources (n.d.) Retrieved 4 October 2004, http://www.idcide.com/pages/res_term.htm#p3p
34. A domain is considered to have adopted P3P if the primary website has either a P3P reference file in the designated well-known location or a P3P element in the Web server’s HTTP header, and the reference file or HTTP header contains a URL for the applicable P3P policy, which also must be accessible at the designated location (Ernst & Young, 2004).
35. The AT&T Privacy Bird is a P3P user agent implemented as a ‘browser helper object’ that works with the Microsoft Internet Explorer 5.01, 5.5, and 6.0 web browsers on Microsoft Windows 98/2000/ME/NT/XP operating systems. It displays a bird icon in the browser title bar that changes colour and shape to indicate whether or not a website’s P3P policy matches a user’s privacy preferences (Cranor et al., 2003).