Privacy policy enforcement in enterprises with identity management solutions

ACM International Conference Proceeding Series

Volumn , Issue , 2006, Pages

  Mont, Marco Casassa ^a   Thyne, Robert ^b  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

^b Hewlett Packard (Canada Co)   (Canada)

Author keywords

access control; identity management; policy enforcement; privacy

Indexed keywords

ACCESS CONTROL; WEB SERVICES;

BUSINESS INTERACTIONS; BUSINESS PROCESS; IDENTITY MANAGEMENT; PERSONAL INFORMATION; POLICY ENFORCEMENT; PRIVACY; PRIVACY LAW; PRIVACY MANAGEMENT; PRIVACY POLICIES; WEBS SERVICES;

DATA PRIVACY;

EID: 80051658269     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1501434.1501465     Document Type: Conference Paper

References (25)

1. C. Laurant, "Privacy International: Privacy and Human Rights 2003: an International Survey of Privacy Laws and Developments, Electronic Privacy Information Center (EPIC)", Privacy International. http://www.privacyinternational.org/survey/phr2003/2003.
2. Online Privacy Alliance, "Guidelines for Online Privacy Policies", http://www.privacyalliance.org/, Online Privacy Alliance, 2004.
3. OECD, "OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data.", http://www1.oecd.org/publications/e-book/9302011E.PDF, 1980.
4. G. Karjoth, M. Schunter "A Privacy Policy Model for Enterprises", IBM Research, Zurich. 15th IEEE Computer Foundations Workshop, 2002.
5. G. Karjoth, M. Schunter, M. Waidner, "Platform for Enterprise Privacy Practices: Privacy-enabled Management of Customer Data", 2nd Workshop on Privacy Enhancing Technologies, LNCS 2482/2003, Springer Verlang, 2002, pp. 69-84.
6. M. Schunter, P. Ashley, "The Platform for Enterprise Privacy Practices", IBM Zurich Research Laboratory, 2002.
7. G. Karjoth, M. Schunter, M. Waidner, "Privacy-enabled Services for Enterprises", IBM Zurich Research Laboratory, Workshop on Trust and Privacy in Digital Business (TrustBus) 2002, 2002.
8. IBM, "The Enterprise Privacy Authorization Language (EPAL), EPAL 1.1 specification", http://www.zurich.ibm.com/security/enterprise-privacy/epal/, IBM, 2004.
9. R. Agrawal, J. Kiernan, R. Srikant, Y. Xu, "Hippocratic Databases",http://www.almaden.ibm.com/cs/people/srikant/p apers/vldb02.pdf, IBM Almaden Research Center, 2002.
10. IBM Tivoli Privacy Manager, "IBM Tivoli Privacy Manager main web page", http://www-306.ibm.com/software/tivoli/products/privacy-mgr-e-bus/, 2005.
11. IBM Tivoli Privacy Manager, "IBM Tivoli Online technical documentation", http://publib.boulder.ibm.com/tividd/td/PrivacyManagerfore-business1.1.html, 2005.
12. HP, "HP Select Federation: Product and Solution Overview",http://www.managementsoftware.hp.com/product s/slctfed/, 2005.
13. ePok, "identity management solution-Trusted Data Exchange Server", http://www.epokinc.com/, 2005.
14. HP, "HP OpenView SelectAccess: Overview and Features", http://www.openview.hp.com/products/select, 2005.
15. J. Byun, E. Bertino, N. Li, "Purpose based access control for privacy protection in Database Systems", Technical Report 2004-52, Purdue University, 2004.
16. M. Casassa Mont, P. Bramhall, J. Pato, "On Adaptive Identity Management: The Next Generation of Identity Management Technologies", HPL-2003-149, 2003.
17. HP, "HP OpenView Select Audit Documentation", http://www.managementsoftware.hp.com/products/slctaud/, 2006.
18. M. Casassa Mont, S. Pearson, P. Bramhall, "Towards Accountable Management of Privacy and Identity Information", 8th European Symposium on Research in Computer Security (ESORICS) 2003, 2003, pp. 146-161.
19. M. Casassa Mont, R. Thyne, Pete Bramhall, "Privacy Enforcement with HP Select Access for Regulatory Compliance", HPL-2005-10, 2005.
20. M. Casassa Mont, "Dealing with Privacy Obligations: Important Aspects and Technical Approaches", 1st International Conference on Trust and Privacy in Digital Business (TrustBus) 2004, LNCS 3184/2004, Springer Berlin, 2004, pp. 120-131.
21. M. Casassa Mont, "Dealing with Privacy Obligations in Enterprises", Information Security Solutions Europe (ISSE) 2004, 2004.
22. PRIME, "Privacy and Identity Management for Europe, European RTD Integrated Project under the FP6/IST Programme", http://www.prime-project.eu/, 2006.
23. HP, "HP OpenView Select Identity: Overview and Features",http://www.openview.hp.com/products/slctid/inde x.html, 2005.
24. M. Casassa Mont, R. Thyne, P. Bramhall, "Privacy Enforcement for IT Governance: Doing it for Real", 2nd International Conference on Trust and Privacy in Digital Business (TrustBus) 2005, LNCS 3592/2005, Springer, 2005, pp. 226-235.
25. Oracle, "Oracle Virtual Private Database", http://www.oracle.com/technology/deploy/security/db-securi ty/htdocs/vpd.html, 2006.