Enhance data privacy in service compositions through a privacy proxy

Proceedings of the 2011 6th International Conference on Availability, Reliability and Security, ARES 2011

Volumn , Issue , 2011, Pages 615-620

  Ma, Zhendong ^a   Mangler, Jürgen ^b   Wagner, Christian ^a   Bleier, Thomas ^a  

^a AIT AUSTRIAN INSTITUTE OF TECHNOLOGY   (Austria)

^b Secure Business Austria ^*  (Austria)

Author keywords

Data privacy; Privacy proxy; Service composition; Web services

Indexed keywords

BUSINESS INTERACTIONS; LIGHT WEIGHT; SERVICE COMPOSITION; SERVICE COMPOSITIONS; SERVICE INFRASTRUCTURE; SERVICE LEVEL AGREEMENTS;

QUALITY OF SERVICE; USER INTERFACES; WEB SERVICES;

DATA PRIVACY;

EID: 80455173432     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2011.94     Document Type: Conference Paper

References (23)

1. M. P. Papazoglou, Web Services: Principles and Technology. Pearson, Prentice Hall, 2008.
2. IBM and Microsoft, "Security in a web services world: A proposed architecture and roadmap," http://msdn.microsoft.com/en-us/ library/ms977312.aspx, 2002, white Paper.
3. L. Martino and E. Bertino, "Security for web services: Standards and research issues," Int. J. of Web Services Research (IJWSR), vol. 6, no. 4, pp. 48-74, 2009.
4. P. C. K. Hung, E. Ferrari, and B. Carminati, "Towards standardized web services privacy technologies," in ICWS, 2004.
5. B. Carminati, E. Ferrari, and P. C. Hung, "Exploring privacy issues in web services discovery agencies," IEEE Security and Privacy, vol. 3, pp. 14-21, 2005. (Pubitemid 41560439)
6. G. O. M. Yee, "Estimating the privacy protection capability of a web service provider," Int. J. Web Service Res., vol. 6, no. 2, pp. 20-41, 2009.
7. H. Haas, "Web service use case: Travel reservation," http://www.w3.org/ 2002/06/ws-example, May 2002.
8. W3C, "XML Encryption Syntax and Processing," 2002.
9. OASIS, "WS-Security 1.1," 2006.
10. European Data Protection Supervisor (EDPS), "Glossary of protectoin of personal data," http://www.edps.europa.eu/EDPSWEB/edps/cache/ off/EDPS/Dataprotection/Glossary.
11. W3C, "The Platform for Privacy Preferences (P3P)," http://www.w3.org/ P3P/.
12. OASIS, "Privacy policy profile of XACML v2.0," http://docs.oasis-open. org/xacml/2.0/access control-xacml-2.0-privacy profile-spec-os.pdf, 2005.
13. S. Benbernou, H. Meziane, Y. H. Li, and M. Hacid, "A privacy agreement model forWeb services," in Services Computing, IEEE International Conference on. Los Alamitos, CA, USA: IEEE Computer Society, 2007, pp. 196-203. (Pubitemid 47565596)
14. S. Benbernou, H. Meziane, and M. S. Hacid, "Run-Time monitoring for Privacy-Agreement compliance," in Service-Oriented Computing - ICSOC 2007, 2007.
15. R. Khazankin and S. Dustdar, "PROVIDENCE: a framework for private data propagation control in Service-Oriented systems," in Towards a Service-Based Internet, 2010.
16. I. Haq, A. Huqqani, and E. Schikuta, "Aggregating hierarchical service level agreements in business value networks," in Business Process Management, 2009.
17. B. Carminati, E. Ferrari, and P. C. K. Hung, "Security conscious web service composition," in Web Services, IEEE International Conference on. Los Alamitos, CA, USA: IEEE Computer Society, 2006, pp. 489- 496.
18. M. Hansen, A. Schwartz, and A. Cooper, "Privacy and identity management," IEEE Security and Privacy, vol. 6, pp. 38-45, 2008. (Pubitemid 351506254)
19. M. Alsaleh and C. Adams, "Enhancing consumer privacy in the liberty alliance identity federation and web services frameworks," in Privacy Enhancing Technologies, 2006, pp. 59-77.
20. A. Andrieux, K. Czajkowski, A. Dan, K. Keahey, H. Ludwig, T. Nakata, J. Pruyne, J. Rofrano, S. Tuecke, and M. Xu, "Web services agreement specification (WS-Agreement), 2007," 2004, [Last access: 02/12/2011]. [Online]. Available: http://www.gridforum.org/documents/GFD.107.pdf
21. H. Ludwig, "WS-Agreement concepts and Use-Agreement- Based Service-Oriented architectures," IBM Research Division, Technical Report, 2006, [Last access: 02/12/2011]. [Online]. Available: http://citeseerx.ist.psu. edu/viewdoc/download?doi=10. 1.1.121.476&rep=rep1&type=pdf
22. U. Khedker, A. Sanyal, and B. Karkare, Data Flow Analysis: Theory and Practice. Boca Raton, FL, USA: CRC Press, Inc., 2009.
23. M. Backes, B. Köpf, and A. Rybalchenko, "Automatic discovery and quantification of information leaks," in IEEE Symposium on Security and Privacy, 2009, pp. 141-153.