Avoiding privacy violations caused by context-sensitive services

Pervasive and Mobile Computing

Volumn 2, Issue 4, 2006, Pages 427-452

  Hengartner, Urs ^a   Steenkiste, Peter ^b  

^a UNIVERSITY OF WATERLOO   (Canada)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Context awareness; Distributed access control; Location based services

Indexed keywords

ALGORITHMS; CONSTRAINT THEORY; CONTROL SYSTEMS; DECISION THEORY; INFORMATION THEORY;

CONTEXT AWARENESS; DISTRIBUTED ACCESS CONTROL; LOCATION-BASED SERVICES;

DATA PRIVACY;

EID: 33749660336     PISSN: 15741192     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.pmcj.2006.07.007     Document Type: Article

References (21)

1. J. Al-Muhtadi, A. Ranganathan, R. Campbell, M.D. Mickunas, Cerberus: A context-aware security scheme for smart spaces, in: Proceedings of IEEE International Conference on Pervasive Computing and Communications, PerCom 2003, 2003, pp. 489-496
2. H. Chen, T. Finin, A. Joshi, Semantic web in the context broker architecture, in: Proceedings of 2nd IEEE International Conference on Pervasive Computing and Communications, PerCom 2004, 2004, pp. 277-286
3. M.J. Covington, P. Fogla, Z. Zhan, M. Ahamad, A context-aware security architecture for emerging applications, in: Proceedings of 18th Annual Computer Security Applications Conference, ACSAC 2002, 2002
4. F. Gandon, N. Sadeh, A semantic Ewallet to reconcile privacy and context awareness, in: Proceedings of 2nd International Semantic Web Conference, ISWC2003, 2003
5. Minami K., and Kotz D. Secure context-sensitive authorization. Journal of Pervasive and Mobile Computing (PMC) 1 1 (2005)
6. Myles G., Friday A., and Davies N. Preserving privacy in environments with location-based applications. Pervasive Computing 2 1 (2003) 56-64
7. U. Hengartner, P. Steenkiste, Avoiding privacy violations caused by context-sensitive services, in: Proceedings of 4th IEEE International Conference on Pervasive Computing and Communications, PerCom 2006, 2006, pp. 222-231
8. L. Bauer, M.A. Schneider, E.W. Felten, A general and flexible access-control system for the web, in: Proceedings of 11th Usenix Security Symposium, 2002, pp. 93-108
9. J. Howell, D. Kotz, End-to-end authorization, in: Proceedings of 4th Symposium on Operating System Design & Implementation, OSDI 2000, 2000, pp. 151-164
10. Denning D.E. Cryptography and Data Security (1982), Addison Wesley. 0-201-10150-5
11. Castano S., Fugini M., Martella G., and Samarati P. Database Security (1994), Addison Wesley Professional. 0-201-59375-0
12. Adam N.R., and Wortmann J.C. Security-control methods for statistical databases: A comparative study. ACM Computing Surveys (CSUR) 21 4 (1989) 515-556
13. U. Hengartner, Access control to information in pervasive computing environments, Ph.D. Thesis, Computer Science Department, Carnegie Mellon University, available as Technical Report CMU-CS-05-160, August 2005
14. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Ylonen, SPKI certificate theory, RFC 2693, September 1999
15. Garlan D., Siewiorek D., Smailagic A., and Steenkiste P. Project aura: Towards distraction-free pervasive computing. IEEE Pervasive Computing 1 2 (2002) 22-31
16. M.J. Covington, W. Long, S. Srinivasan, A. Dey, M. Ahamad, G. Abowd, Securing context-aware applications using environment roles, in: Proceedings of 6th ACM Symposium on Access Control Models and Technologies, SACMAT '01, 2001, pp. 10-20
17. G. Neumann, M. Strembeck, An approach to engineer and enforce context constraints in an RBAC environment, in: Proceedings of 8th ACM Symposium on Access Control Models and Technologies, SACMAT 2003, 2003, pp. 65-79
18. Bacon J., Moody K., and Yao W. A model of OASIS role-based access control and its support for active security. ACM Transactions on Information and System Security (TISSEC) 5 4 (2002) 492-540
19. ABC usage control model. ACM Transactions on Information and System Security (TISSEC) 7 1 (2004) 128-174
20. P. McDaniel, On context in authorization policy, in: Proceedings of 8th ACM Symposium on Access Control Models and Technologies, SACMAT 2003, 2003, pp. 80-89
21. W.H. Winsborough, N. Li, Safety in automated trust negotiation, in: Proceedings of 2004 IEEE Symposium on Security and Privacy, 2004, pp. 147-160