User interfaces for privacy agents

ACM Transactions on Computer-Human Interaction

Volumn 13, Issue 2, 2006, Pages 135-178

  Cranor, Lorrie Faith ^a,c   Guduru, Praveen ^b,d   Arjula, Manjula ^b,d  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b AT AND T LABS RESEARCH   (United States)

^c Carnegie Mellon University   (United States)

^d AT AND T LABS RESEARCH   (United States)

Author keywords

P3P; Preferences; Privacy; Privacy enhancing technology; Privacy policy; User agent

Indexed keywords

POLICY INFORMATION; PRIVACY AGENTS; USER PRIVACY PREFERENCES;

COMPUTER NETWORKS; DATA PRIVACY; SECURITY OF DATA; WEBSITES;

USER INTERFACES;

EID: 33749617824     PISSN: 10730516     EISSN: 10730516     Source Type: Journal    
DOI: 10.1145/1165734.1165735     Document Type: Article

References (54)

1. ACKERMAN, M. S., CRANOR, L. F., AND REAGLE, J. 1999. Privacy in e-commerce: Examining user scenarios and privacy preferences. In Proceedings of the 1st ACM Conference on Electronic Commerce (EC '99). Denver, Colorado (Nov.), ACM Press, New York, NY, 1-8. DOI= http://doi.acm.org/10.1145/336992.336995.
2. ACKERMAN, M. S. AND CRANOR, L. 1999. Privacy critics: UI components to safeguard users' privacy. In CHI '99 Extended Abstracts on Human Factors in Computing Systems (CHI '99). Pittsburgh, PA (May). ACM Press, New York, NY, 258-259. DOI=http://doi.acm.org/10.1145/632716. 632875.
3. ADAMS, A. AND SASSE, M. A. 2001. Privacy in multimedia communications: Protecting users, not just data. In People and Computers XV-Interaction Without Frontiers, Joint Proceedings of HCI2001 and ICM2001, A. Blandford, J. Vanderdonkt, and P. Gray, Eds. Springer-Verlag. 49-64.
4. AGRE, P. 1997. Introduction. In Technology and Privacy: The New Landscape, P. Agre and M. Rotenberg, Eds. MIT Press, Cambridge, MA, 1-28.
5. ALSAID, A. AND MARTIN, D. 2002. Detecting Web bugs with bugnosis: Privacy advocacy through education. In Proceedings of the 2002 Workshop on Privacy Enhancing Technologies (PET '02). http://www.cs.uml.edu/~dm/pubs/bugnosis- pet2002.ps.
6. BELLOTTI, V. 1997. Design for privacy in multimedia computing and communications environments. In Technology and Privacy: The New Landscape, P. Agre and M. Rotenberg, Eds. MIT Press, Cambridge, MA, 63-98.
7. BERNERS-LEE, T., HENDLER, J., AND LASSILA, O. May 2001. The Semantic Web. Scientific American.
8. BURKERT, H. 1997. Privacy-enhancing technologies: Typology, critique, vision. In Technology and Privacy: The New Landscape, P. Agre and M. Rotenberg, Eds. MIT Press, Cambridge, MA.
9. BYERS, S., CRANOR, L. F., AND KORMANN, D. 2003. Automated analysis of P3P-abled Web sites. In Proceedings of the 5th International Conference on Electronic Commerce (ICEC '03). Pittsburgh, PA (Sept.-Oct.). ACM Press, New York, NY, 326-338. DOI= http://doi.acm.org/10.1145/948005. 948048.
10. BYERS S, CRANOR, L., KORMANN, D., AND MCDANIEL P. 2004. Searching for privacy: Design and implementation of a P3P-enabled search engine. In Proceedings of the 2004 Workshop on Privacy Enhancing Technologies (PET '04). Toronto, Canada, (May).
11. CATLETT, J. 2000. Open letter to P3P developers & replies. In Proceedings of the 10th Conference on Computers, Freedom and Privacy: Challenging the Assumptions (CFP '00). Toronto, Canada (April). ACM Press, New York, NY, 157-164. DOI= http://doi.acm.org/10.1145/332186. 332276.
12. CRANOR, L. F. 1999. Internet privacy. Comm. ACM 42, 2, (Feb.), 28-38. DOI= http://doi.acm. org/10.1145/293411.293440.
13. CRANOR, L. Web Privacy with P3P. O'Reilly & Associates, Sebastopol CA.
14. CRANOR, L. F., ARJULA, M., AND GUDURU, P. 2002a. Use of a P3P user agent by early adopters. In Proceedings of the 2002 ACM Workshop on Privacy in the Electronic Society (WPES '02). Washington, DC (Nov.). ACM Press, New York, NY, 1-10. DOI= http://doi.acm.org/10.1145/644527. 644528.
15. CRANOR, L., LANGHEINRICH, M., MARCHIORI, M., PRESLER-MARSHALL, M., AND REAGLE, J. 2002b. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. World Wide Web Consortium Recommendation (April). http://www.w3.org/TR/P3P/.
16. CRANOR, L., LANGHEINRICH, M., AND MARCHIORI, M. 2002c. A P3P Preference Exchange Language 1.0 (APPEL1.0). World Wide Web Consortium Working Draft (April). http://www.w3.org/TR/WD-P3P-Preferences.
17. CRANOR, L. AND REAGLE, J. 1998. Designing a social protocol: Lessons learned from the platform for privacy preferences project. In Telephony, the Internet, and the Media, J. K. MacKie-Mason and D. Waterman, Eds. Lawrence Erlbaum Associates, Mahwah, NJ. http://www.w3.org/People/ Reagle/articles/ tprc97/tprc-f2m3.html.
18. CRANOR, L. AND REIDENBERG, J. 2002. Can user agents accurately represent privacy notices? TPRC 2002. http://articles.ssrn.com/sol3/articles.cfm? abstract_id=328860.
19. CRANOR, L. AND WENNING, R. 2002. Why P3P is a good tool for consumers and companies. GigaLaw.com. http://www.gigalaw.com/articles/2002/cranor-2002-04. html.
20. CRANOR, L. F. AND WRIGHT, R. N. 2000. Influencing software usage. In Proceedings of the 10th Conference on Computers, Freedom and Privacy: Challenging the Assumptions (CFP '00) Toronto, Canada (April). ACM Press, New York, NY, 45-55. DOI= http://doi.acm.org/ 10.1145/332186.332210.
21. DOURISH, P. 2004. Security as experience and practice: Supporting everyday security. The Workshop on Usable Privacy and Security Software, Rutgers, NJ. (July). http:// www.ics.uci.edu/~jpd/talks/wupss-security.pdf.
22. Esposrro, D. 1999. Helper objects: The browser the way you want it. MSDN Library (Jan.). http://msdn.microsoft.com/library/default.asp?url=/library/en- us/dnwebgen/html/bho.asp.
23. FRIEDMAN, B., KAHN, P., AND BORNING, A. 2002. Value sensitive design: Theory and methods, UW CSE Tech. rep. 02-12-01, http://www.ischool.washington. edu/vsd/vsd-theory-methods-tr. pdf.
24. GANDON, F. L. AND SADEH, N. M. 2003. A semantic e-wallet to reconcile privacy and context-awareness. In Proceedings of the 2nd International Semantic Web Conference (ISWC03).
25. GEORGIA TECH GRAPHICS. 1998. Visualization and usability center. GVU's 10th WWW User Survey. Available at http://www.gvu.gatech.edu/user_surveys.
26. GOLDBERG, I. 2002. Privacy-enhancing technologies for the Internet II: Five years later. In PET 2002 Workshop on Privacy-Enhancing Technologies. Lecture Notes in Computer Science. Springer-Verlag, Berlin, Germany.
27. GOLDFEDER, A. AND LEIBFRIED, L. 2001. Privacy in Internet Explorer 6. MSDN Library. (Oct.). http://msdn.microsoft.com/library/default.asp?url=/ library/en-us/dnpriv/html/ie6privacyfeature. asp.
28. HARRIS, L. AND ASSOCIATES AND WESTIN, A. F. 1991. Harris-Equifax Consumer Privacy Survey 1991. Equifax Inc., Atlanta GA.
29. HARRIS, L. AND ASSOCIATES AND WESTIN, A. F. 1998. E-commerce and Privacy: What Net Users Want. Privacy and American Business, Hackensack NJ.
30. HOCHHAUSER, M. 2003. Why Patients Won't Understand Their HIPAA Notices. Privacy Rights Clearinghouse. http//www.privacyrights.org/ar/HIPAA-Readability. htm.
31. HOCHHAUSER, H. 2002. The platform for privacy preference as a social protocol: An examination within the U.S. policy context. ACM Trans. Inter. Tech. 2, 4 (Nov.), 276-306. DOI= http://doi.acm.org/10.1145/604596.604598.
32. HULL, R., KUMAR, B., LIEUWEN, D., PATEL-SCHNEIDER, P., SAHUGUET, A., VARADARAJAN, S., AND VYAS, A. 2003. Enabling context-aware and privacy-conscious user data sharing. In Proceedings of the 2004 IEEE International Conference on Mobile Data Management, 187-198.
33. JENSEN, C. AND POTTS, C. 2004. Privacy policies as decision-making tools: An evaluation of online privacy notices. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI '04) Vienna, Austria (April). ACM Press, New York, NY, 471-478. DOI= http://doi.acm.org/10.1145/ 985692.985752.
34. KHONG, P. W. AND SONG, J. P. 2003. Exploring users' emotional relationships with IT products: A structural equation model. In Proceedings of the 2003 International Conference on Designing Pleasurable Products and Interfaces. (DPPI '03). Pittsburgh, PA, (June). ACM Press, New York, NY, 45-50. DOI= http://doi.acm.org/10.1145/782896.782908.
35. LEDERER, S., HONG, J. I., DEY, A., AND LANDAY, J. A. 2004. Personal privacy through understanding and action: Five pitfalls for designers. Person. Ubiquit. Comput. 8, 6, 440-454.
36. LEDERER, S., MANKOFF, J., AND DEY, A. K. 2003. Who wants to know what when? Privacy preference determinants in ubiquitous computing. In CHI '03 Extended Abstracts on Human Factors in Computing Systems. Ft. Lauderdale, FL (April). ACM Press, New York, NY, 724-725. DOI= http://doi.acm.org/10.1145/ 765891.765952.
37. MACKAY, W. E. 1991. Triggers and barriers to customizing software. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems: Reaching Through Technology (CHI '91). New Orleans, LA (April-May). S. P. Robertson, G. M. Olson, and J. S. Olson, Eds. ACM Press, New York, NY, 153-160. DOI=http://doi.acm.org/10.1145/108844.108867.
38. MALIN, B. 2005. Betrayed by my shadow: Learning data identity via trail matching. J. Privacy Tech. 20050609001.
39. MCCARTHY, J. D., SASSE, A. M., AND RIEGELSBERGER, J. 2003. Could I have the menu please? An eyetracking study of design conventions. In Proceedings of HCI '03. Bath, UK (Sept.).
40. MCGRENERE, J., BAECKER, R. M., AND BOOTH, K. S. 2002. An evaluation of a multiple interface design solution for bloated software. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems: Changing Our World, Changing Ourselves (CHI '02). Minneapolis, MN (April). ACM Press, New York, NY, 164-170. DOI= http://doi.acm.org/10.1145/503376.503406.
41. MILLETT, L. I., FRIEDMAN, B., AND FELTEN, E. 2001. Cookies and Web browser design: Toward realizing informed consent online. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI '01). Seattle, WA. ACM Press, New York, NY, 46-52. DOI= http://doi.acm.org/10.1145/365024.365034.
42. MSDN LIBRARY. 2002. How to create a customized privacy import file. http://msdn.microsoft.com/library/default.asp?url=/workshop/security/privacy/ overview/privacyimportxml.asp.
43. MULLIGAN, D., CAVOUKIAN, A., SCHWARTZ, A., AND GURSKI, M. 2000. P3P and privacy: An update for the privacy community, http://www.cdt.org/privacy/pet/ p3pprivacy.shtml.
44. ORGANIZATION FOR ECONOMIC CO-OPERATION AND DEVELOPMENT. 1980. Recommendation of the council concerning guide-lines governing the protection of privacy and transborder flows of personal data. Adopted by the Council Sept. 1980.
45. PALEN, L. AND DOURISH, P. 2003. Unpacking privacy for a networked world. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI '03). Ft. Lauderdale, FL (April). ACM Press, New York, NY, 129-136. DOI= http://doi.acm.org/10.1145/642611.642635.
46. PFITZMANN, B. AND WAIDNER, M. 2002. Privacy in browser-based attribute exchange. In Proceedings of the 2002 ACM Workshop on Privacy in the Electronic Society (WPES '02). Washington, DC (Nov.). ACM Press, New York, NY, 52-62. DOI= http://doi.acm.org/10.1145/ 644527.644533.
47. HARRIS INTERACTIVE. 2001. Privacy Leadership Initiative. Privacy Notices Research Final Results. Conducted by Harris Intereactive (Dec.), http://www.ftc.gov/bcp/workshops/glb/supporting/harris%20results.pdf.
48. RODGER, W. 2003. Privacy isn't public knowledge: Online policies spread confusion with legal jargon, USA Today (May 1, 2003, 3D). Available at http://www.usatoday.com/life/cyber/tech/cth818.htm.
49. SHEEHAN, K. B. 2002. Toward a typology of internet users and online privacy concerns. Inform. Society, 18, 21-32.
50. SPIEKERMANN, S., GROSSKLAGS, J., AND BEHENDT, B. E-privacy in 2nd generation e-commerce: Privacy preferences versus actual behavior. In Proceedings of EC'01, Tampa FL. (Oct.), ACM Press, 38-47.
51. SWEENEY, L. 2001. Information explosion. In Confidentiality, Disclosure, and Data Access: Theory and, Practical Applications for Statistical Agencies, L. Zayatz, P. Doyle, J. Theeuwes, and J. Lane, Eds, Urban Institute, Washington, DC. http://privacy.cs.cmu.edu/people/sweeney/explosion.html.
52. WENNING, R., ED. 2006. The Platform for Privacy Preferences 1.1 (P3P1.1) Specification. W3C Working Draft 5 Feb. http://www.w3.org/TR/2006/WD-P3P11- 20060210/.
53. WRITTEN, A. AND TYGAR, J. D. 1999. Why Johnny can't encrypt. In Proceedings of the 8th USENIX Secrutiy Symposium.
54. WORLD WIDE WEB CONSORTIUM. 1997. FTC Comment: Script of W3C P3 Prototype (June). http://www.w3.org/Talks/970612-ftc/ftc-sub.html.