A Formal Privacy Management Framework

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5491 LNCS, Issue , 2009, Pages 162-176

  Le Métayer, Daniel ^a  

^a INRIA RHÔNE ALPES   (France)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PRIVACY; SOFTWARE AGENTS;

COMPUTER SCIENTISTS; FORMAL FRAMEWORK; MULTIDISCIPLINARY PROJECTS; PRIVACY MANAGEMENT; PRIVACY PROTECTION;

COMPUTER PRIVACY;

EID: 67650682101     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-01465-9_11     Document Type: Conference Paper

References (32)

1. Ashley, P., Hada, S., Karjoth, G., Powers, C., Schunter, M.: Enterprise privacy authorization language (EPAL). Technical Report 3485, IBM (2003)
2. Backes, M., Durmuth, M., Karjoth, G.: Unification in privacy policy evaluation-translating EPAL into Prolog. In: Fifth IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY 2004) (2004) (Pubitemid 40061198)
3. Backes, M., Pfitzmann, B., Schunter, M.: A toolkit for managing enterprise privacy policies. In: Snekkenes, E., Gollmann, D. (eds.) ESORICS 2003. LNCS, vol.2808, pp. 162-180. Springer, Heidelberg (2003) (Pubitemid 37311869)
4. Bibas, S.A.: A contractual approach to data privacy. Harvard Journal of Law and Public Policy, 17 (1994) (Pubitemid 24795082)
5. Breaux, T.D., Anton, A.I.: Analysing goal semantics for rights, permissions, and obligations. In: Sixth IEEE Int. Conference on Requirements Engineering (RE 2005) (2005)
6. Breaux, T.D., Anton, A.I.: Deriving semantics models from privacy principles. In: Sixth IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY 2005) (Pubitemid 43861249)
7. Breaux, T.D., Anton, A.I.: Mining rule semantics to understand legislative compliance. In: ACM Workshop on Privacy in the Electronic Society (WPES 2005) (2005) (Pubitemid 44458306)
8. Brodie, C.A., Karat, C.-M., Karat, J.: An empirical study of natural language parsing of privacy policy rules using the Sparcle policy workbench. In: Symposium On Usable Privacy and Security (SOUPS) (2006) (Pubitemid 46966965)
9. Cederquist, J.G., Corin, R., Dekker, M., Etalle, S., Den Hartog, J.: An audit logic for accountability. In: Sixth IEEE Int.Workshop on Policies for Distributed Systems and Networks (POLICY 2005) (2005) (Pubitemid 43861246)
10. Dehiyat, E.: Intelligent agents and intentionality: should we begin to think outsiDe the box? Computer Law and Security Report 22(1), 472-482 (2006)
11. Etalle, S., Winsborough, W.: A posteriori compliance control. In: ACM Symposium on Access Control Models And Technologies (SACMAT 2007) (2007) (Pubitemid 47281533)
12. Finocchiaro, G.: Electronic contracts and software agents. Computer Law and Security Report 19(1), 20-24 (2003)
13. Gunter, C., May, M.J., Stubblebine, S.: A formal privacy system and its application to location based services. In: Martin, D., Serjantov, A. (eds.) PET 2004. LNCS, vol.3424, pp. 256-282. Springer, Heidelberg (2005) (Pubitemid 41252009)
14. Health Resources and Services Administration. Health Insurance Portability and Accountability Act. Public Law, 104-191 (1996)
15. Hildebrandt, M.: Profiling: from data to knowledge. DuD: Datenschutz und Datensicherheit 30(9), 548-552 (2006)
16. Hilty,M., Pretschner, A., Basin, D., Schaefer, C.,Walter, T.: A policy language for distributed usage control. In: Biskup, J., Ĺopez, J. (eds.) ESORICS 2007. LNCS, vol.4734, pp. 531-546. Springer, Heidelberg (2007) (Pubitemid 47469575)
17. Karat, J., Karat, C.-M., Brodie, C.A., Feng, J.: Privacy in information technology: designing to enable privacy policy management in organizations. Int. Journal on Human-Computer Studies 63 (2005) (Pubitemid 40753497)
18. Karjoth, G., Schunter, M., Van Herreweghen, E.: Translating privacy practices into privacy promises-How to promise what you can keep. In: Fourth IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY 2003) (2003)
19. Kerrigan, S., Law, K.H.: Logic-based regulation compliance-assistance. In: ICAIL 2003 (2003)
20. Langheinrich, M.: A privacy awareness system for ubiquitous computing environments. In: Borriello, G., Holmquist, L.E. (eds.) UbiComp 2002. LNCS, vol.2498, pp. 237-245. Springer, Heidelberg (2002)
21. Langheinrich, M.: Personal privacy in ubiquitous computing. Tools and system support. Dissertation Document ETH 16100 (2005)
22. Le Métayer, D., Monteleone, S.: Computer assisted consent for personal data processing. In: 3D LSPI Conference on Legal, Security and Privacy Issues in IT (2008)
23. Li,N., Yu, T., Anton, A.: A semantics-based approach to privacy languages. Technical Report 2003-28, CERIAS (2003)
24. May, M.J., Gunter, C., Lee, I.: Privacy APIs: Access control techniques to analyze and verify legal privacy policies. In: Computer Security Foundations Workshop (CSFW) (2006) (Pubitemid 46499719)
25. ABC usage control model. ACM Transactions on Information and System Security (2004)
26. Powers, C., Adler, S., Wishart, B.: EPAL translation of the freedom of information and protection of privacy act. Technical Report Version 1.1, Tivoli Software, IBM (2004)
27. Rouvroy, A.: Privacy, data protection, and the unprecedented challenges of ambient intelligence. Social Science Research Network (2007)
28. The European Parliament and the Council of the European Union. UE directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Official Journal of the European Communities (1995)
29. Veldhuisen, A., Kohras, M., et al.: Analysis of privacy principles: Making privacy operational. Technical Report Version 2.0, International Security Trust and Privacy Alliance (May
30. W3C. Platform for privacy preferences (P3P).W3C recommendation. Technical report,W3C (2002), http://www.w3.org
31. Warren, S., Brandeis, L.: The right to privacy. Harvard Law Review, 193-220 (1890)
32. Yu, T., Li, N., Anton, A.I.: A formal semantics for P3P. In: ACM Workshop on Secure Web Services (2004)