The architecture of a privacy-aware access control decision component

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3956 LNCS, Issue , 2006, Pages 1-15

  Ardagna, Claudio A ^a   Cremonini, Marco ^a   Damiani, Ernesto ^a   De Capitani Di Vimercati, Sabrina ^a   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PRIVACY; DECISION THEORY; INFORMATION ANALYSIS; ONLINE SYSTEMS; SOFTWARE ENGINEERING; WEBSITES;

ACCESS CONTROL DECISION; DESIGN SYSTEMS; LEGITIMATE DATA OWNERS; SENSITIVE INFORMATION;

COMPUTER ARCHITECTURE;

EID: 33745808264     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11741060_1     Document Type: Conference Paper

References (22)

1. C.A. Ardagna, E. Damiani, S. De Capitani di Vimercati, P. Samarati, A Web Service Architecture for Enforcing Access Control Policies. In Proc. of the First International Workshop on Views On Designing Complex Architectures (VODCA 2004), Bertinoro, Italy, September 11-12, 2004.
2. C.A. Ardagna, E. Damiani, S. De Capitani di Vimercati and P. Samarati. Towards Privacy-Enhanced Authorization Policies and Languages. In Proc. of the 19th Annual IF IP WG 11.3 Working Conference on Data and Applications Security (IFIP), Nathan Hale Inn, University of Connecticut, Storrs, USA, August 7-10, 2005.
3. C.A. Ardagna and S. De Capitani di Vimercati. A comparison of modeling strategies in defining XML-based access control languages. Computer Systems Science & Engineering Journal, 2004.
4. P. Ashley, S. Hada, C. Powers and M. Schunter. Enterprise Privacy Authorization Language(EPAL). IBM Research, 2003.
5. P. Ashley, S. Hada, G. Karjoth and M. Schunter. E-P3P privacy policies and privacy authorization. In Proc. of the ACM workshop on Privacy in the Electronic Society (WPES 2002), Washington, DC, USA, November 21, 2002.
6. P. A. Bonatti and D. Olmedilla. Driving and monitoring provisional trust negotiation with metapolicies. In Proc. of the IEEE 6th International Workshop on Policies for Distributed Systems and Networks (POLICY 2005), Stockholm, Sweden, 6-8 June 2005.
7. P. Bonatti and P. Samarati. A unified framework for regulating access and information release on the web. Journal of Computer Security, 10(3):241-272, 2002.
8. L. Cranor and M. Langheinrich and M. Marchiori and M. Presler-Marshall and,J. Reagle. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification, http://www.w3.org/TR/P3P/.
9. E. Damiani, A. Corallo, G. Elia. A Knowledge Management System Enabling Regional Innovation. In Proc. of the VI international conference on KnowledgeBased Intelligent Information & Engineering Systems (KES 2002), Crema, Italy, September 16-18 2002.
10. S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Access control: Principles and solutions. Software - Practice and Experience, 33(5):397-421, April 2003.
11. S. Farrell and R. Housley. An Internet Attribute Certificate for Authorization. Request For Comments 3281, Internet Engineering Task Force, 2002.
12. C. A. Gunter, M. J. May and S. G. Stubblebine. A Formal Privacy System and its Application to Location Based Services. In Proc. of the 4th Workshop on Privacy Enhancing Technologies (PET 2004), Toronto, Canada, May 26-28, 2004.
13. International Security, Trust, and Privacy Alliance (ISTPA), http://www. i stpa.org/
14. ITU Telecommunication Standardization Sector (ITU-T). Information Technology - Open Systems Interconnection - The Directory: Authentication Framework. Recommendation X.509 (03/00), International Telecommunication Union, 2000.
15. S. Jajodia, P. Samarati, M. Sapino, and V. Subrahmanian. Flexible support for multiple access control policies. ACM Transactions on Database Systems, 26(2):1828, June 2001.
16. Jena, http://jena.sourceforge.net.
17. G. Karjoth, M. Schunter and M. Waidner. Privacy-enabled Services for Enterprises In Proc. of the 13th International Conference on Database and Expert Systems Applications (DEXA '02), Aix-en-Provence, France, September 2-6, 2002.
18. PRIME (Privacy and Identity Management for Europe), http://www. prime-proj ect.eu.org.
19. Reasoning on the Web (REWERSE), http://www.pms.ifi.lmu.de/rewerse-wga1/index.html
20. P. Samarati and S. De Capitani di Vimercati. Access control: Policies, models, and mechanisms. In R. Focardi and R. Gorrieri, editors, Foundations of Security Analysis and Design, LNCS 2171. Springer-Verlag, 2001
21. Truste, http://www.truste.org/about/index.php
22. XACML - (extensible Access Control Markup Language), http://www.oasisopen. org/committees/tc_home.php?wg_abbrev=xacml#XACML20