A three-layered model to implement data privacy policies

Computer Standards and Interfaces

Volumn 30, Issue 6, 2008, Pages 398-409

  Canfora, Gerardo ^a   Costante, Elisa ^a   Pennino, Igino ^a   Visaggio, Corrado Aaron ^a  

^a UNIVERSITY OF SANNIO   (Italy)

Author keywords

Data privacy; Front end trust filter; Security Software Engineering

Indexed keywords

CANNING; DATA PRIVACY; FIBER OPTIC SENSORS; INDUSTRIAL RESEARCH; MOBILE DEVICES; RISKS; TECHNOLOGY; TELECOMMUNICATION EQUIPMENT; UBIQUITOUS COMPUTING;

(E ,3E) PROCESS; ACCESS RIGHTS; BUSINESS-TO-CUSTOMER (B2C); DATA EXCHANGE (DX); DATA QUALITY (DQ); DATA SOURCING; DATA TRANSACTIONS; ELSEVIER (CO); HIGH FLEXIBILITY; LAYERED MODELING; NEW GENERATION; PRIVACY POLICIES; RESEARCH COMMUNITIES; SENSITIVE DATA; SOFTWARE PRODUCTS; WEB TECHNOLOGIES;

MATHEMATICAL MODELS;

EID: 44949150286     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2008.03.008     Document Type: Article

References (34)

1. Agrawal R., Kiernan J., Srikant R., and Xu Y. Hippocratic databases. Proc. VLDB 2002 (2002), VLDB Endowment 143-154
2. Agrawal R., Bird P., Grandison T., Kiernan J., Logan S., and Rjaibt W. Extending relational database systems to automatically enforce privacy policy. Proc. ICDE'05, IEEE Proceedings Vol. (2005), IEEE Computer Society, Los Alamitos 1013-1022
3. Ashley P., Hada S., Karjoth G., Powers C., and Schunter M. Enterprise Privacy Authorization Language (EPAL 1.1). IBM Research Report (2003). http://www.zurich.ibm.com/security/enterprice-privacy/epal (available at: http://www.zurich.ibm.com/security/enterprice-privacy/epal - last access on 19.02.07)
4. Bayardo R.J., and Srikant R. Technology solutions for protecting privacy. Computer vol. 36(9) (2003), IEEE Computer Society 115-118
5. Bhargav-Spantzel A., Squicciarini A.C., and Bertino E. Trust negotiation in identity management. IEEE Security and Privacy vol. 5 (2007), IEEE Computer Society 55-63 (2)
6. Chen G., Chen K., and Dong J. A database encryption scheme for enhanced security and easy sharing. Proc. CSCWD'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 1-6
7. Chen T. A novel method for protecting sensitive knowledge in association rules mining. Proc. ISDA'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 694-699
8. Durbeck S., Schillinger R., and Kolter J. Security requirements for a semantic service-oriented architecture. Proc. ARES'07, IEEE Proceedings (2007), IEEE Computer Society, Los Alamitos 356-365
9. Fung C.M., Wang K., and Yu S.P. Top-down specialization for information and privacy preservation. Proc. ICDE'05, IEEE Proceedings (2005), IEEE Computer Society, Los Alamitos 206-216
10. Gonzalez-Campos J.S. Secure groups: enhanced management of encrypted data in databases. Proc. ENC'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 92-100
11. Kalloniatis C., Kavakli E., and Gritzalis S. Using privacy process patterns for incorporating privacy requirements into the system design process. Proc. ARES'07, IEEE Proceedings (2007), IEEE Computer Society, Los Alamitos 1009-1017
12. Knutson T. Building privacy into software products and services. IEEE Security and Privacy vol. 5 (2007), IEEE Computer Society 72-74 (3)
13. M. Langheinrich, Personal privacy in ubiquitous computing - tools and system support, PhD. Dissertation, ETH Zurich, 2005.
14. Johnson M.E., and Goetz E. Embedding information security into the organization. IEEE Security and Privacy vol. 5 (2007), IEEE Computer Society 16-24 (3)
15. Machanavajjhala A., Gehrke J., and Kifer D. l-diversity: privacy beyond k-anonymity. Proc. ICDE'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 24
16. Maurer U. The role of cryptography in database security. Proc. SIGMOD'04, ACM Proceedings (2004), ACM, New York 5-10
17. Muralidhar K., Parsa R., and Sarathy R. A general additive data perturbation method for database security. Management Science vol. 45 (1999), INFORMS 1399-1415 (10)
18. Northrop L. Ultra-large-scale system. The software challenge of the future. SEI Carnegie Mellon University Report (2006). http://www.sei.cmu.edu/uls/ (available at http://www.sei.cmu.edu/uls/ - last access on 19.02.07)
19. Pallickara S.L., Plale B., Fang L., and Gannon D. End-to-end trustworthy data access in data-oriented scientific computing. Proc. CCGRID'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 4
20. Pfleeger C.R., and Pfleeger S.L. Security in Computing (2002), Prentice Hall, Upper Saddle River
21. Riedl B., Neubauer T., and Geluch G. A secure architecture for the pseudonymization of medical data. Proc ARES'07, IEEE Proceedings (2007), IEEE Computer Society, Los Alamitos 318-324
22. Sackman S., Struker J., and Accorsi R. Personalization in privacy-aware highly dynamic systems. Communications of the ACM vol. 49 (2006), ACM 32-38 (9)
23. Schlager C., Nowey T., and Montenegro J.A. A reference model for authentication and authorisation infrastructures respecting privacy and flexibility in b2c eCommerce. Proc. ARES'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 709-716
24. Shin K., and Yasuda H. Provably secure anonymous access control for heterogeneous trusts. Proc. ARES'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 24-33
25. Squicciarini A., Bertino E., Ferrari E., Paci F., and Thuraisingham B. PP-trust-X: a system for privacy preserving trust negotiations. ACM Transactions on Information and System Security vol. 10 (3) (2007), ACM Article No. 12
26. Squicciarini A.C., Barghav A., Bertino E., Ferrari E., and Ray I. Trust negotiations with customizable anonymity. Proc. WI-IAT 2006, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 69-72
27. Subirana B., and Bain M. Privacy and security in highly dynamic systems: legal programming. Communications of the ACM vol. 49 (2006), ACM 28-31 (9)
28. Sweeney L. k-anonymity: a model for protecting privacy. International Journal on Uncertainty, Fuzziness and Knowledge Based Systems vol. 10 (5) (2002), World Scientific Publishing 557-570
29. Tentori M., Favela J., and Rodriguez M.D. Privacy-aware autonomous agents for pervasive healthcare. IEEE Intelligent Systems vol. 21 (6) (2006), IEEE Computer Society 55-62
30. Yu L., Chen G., Chen K., and Dong J. Securely sharing data in encrypted databases. Proc. CSCWD'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 1-6
31. Zhang N., and Zhao W. Privacy-preserving data mining systems. Computer vol. 40 (4) (2007), IEEE Computer Society 52-57
32. Zhang X., Wogn H., and Cheung W.K. A privacy-aware service-oriented platform for distributed data mining. Proc. CEC/EEE'06, IEEE Proceedings (2006), IEEE Computer Society, Los Alamitos 44-47
33. Platform for Privacy Preferences (P3P) Project, W3C, http://www.w3.org/P3P/ (last access on January 2007).
34. Sun's XACML Implementation (November 2003)