Privacy promises, access control, and privacy management. Enforcing privacy throughout an enterprise by extending access control

Proceedings - 3rd International Symposium on Electronic Commerce, ISEC 2002

Volumn , Issue , 2002, Pages 13-21

  Powers, C S ^a   Ashley, P ^b   Schunter, M ^c  

^a IBM   (United States)

^b IBM Australia   (Australia)

^c IBM RESEARCH ZURICH   (Switzerland)

Author keywords

Access Control; Enterprise Privacy Management; Privacy Policy

Indexed keywords

COMMERCE; DATA PRIVACY; ELECTRONIC COMMERCE;

COMPLETE COVERAGES; NEW APPROACHES; PRIVACY MANAGEMENT; PRIVACY POLICIES; PRIVACY TECHNOLOGIES; PRIVACY TOOLS; PRIVATE DATA;

ACCESS CONTROL;

EID: 84874834655     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISEC.2002.1166906     Document Type: Conference Paper

References (25)

1. Anne Adams and Martina Angela Sasse. Privacy in multimedia communications : Protecting users, not just data. In A. Blandford and J. Vanderdonkt, editors, People and Computers XV - Interaction without frontiers. Joint Proceedings of HCI2001 and ICM2001, pages 49-64. Springer-Verlag, Berlin, 2001.
2. Anonymizer.com. Anonymous Web Browsing Service, www.anonymizer.com.
3. Australia. Privacy Act 1988, 1988. Available at www.privacy.gov.au/act/index.html.
4. Canada. The Personal Information Protection and Electronics Document Act: Bill C6. Available at www.parl.gc.ca/36/2/parlbus/chambus/house/bills/government/C-6/C-6-3/C-%6-cover-E.html.
5. Federal Trade Commission. FTC Announces Settlement With Bankrupt Website, July 2001. www.ftp.gov/opa/2000/07/toysmart2.htm.
6. Federal Trade Commission. Eli Lilly Settles FTC Charges Concerning Security Breach, January 18 2002. Available at www.ftc.gov/opa/2002/01/elililly.htm.
7. ComputerWorld. Profitable Privacy, February 2002. Available at www.computerworld.com/storyba/0,4125,NAV47-ST068354,00.html.
8. COPPA. Children's Online Privacy Protection Act of 1998 (COPPA), October 1998. Available at www.cdt.org/legislation/105th/privacy/coppa.html.
9. Simone Fischer-Hübner. IT-Security and Privacy : Design and Use of Privacy-Enhancing Security Mechanisms. Number 1958 in Lecture Notes in Computer Science (LNCS). Springer Verlag, Berlin, 2001.
10. Organisation for Economic Co-operation and Development. OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data, 1980. Available at webnet1.oecd.org/oecd/pages/home/displaygeneral/0,3380,EN-document-43-1-no-24-10255-43-,FF.html.
11. IBM. IBM alphaWorks P3P Policy Editor. Available at www.alphaworks.ibm.com/tech/p3peditor.
12. iDcide. iDcide Privacy Wall Privacy Technology. Available at www.idcide.com.
13. Zero Knowledge Systems Inc. Enterprise Privacy Manager, P3P Analyzer, Freedom Suite and Private Browsing Service. www.zeroknowledge.com.
14. G. Karjoth, M. Schunter, and M. Waidner. The Platform For Enterprise Privacy Practices -Privacy-enabled Management Of Customer Data. In Proceedings of the Privacy Enhancing Technologies Conference, San Francisco, CA, April 14-15 2002.
15. McAfee. PrivacyService. www.mcafee.com.
16. Forrester Research. Privacy Concerns Cost e-Commerce $15 Billion, September 2001. www.forrester.com.
17. R. Sandhu and P. Samarati. Access control: Principles and practice. IEEE Communications, 32(9):40-48, 1994.
18. HIPA A States. The Health Insurance Portability and Accountability Act of 1996 (HIPAA), October 1998. Available at www.hcfa.gov/hipaa/hipaahm.html.
19. United States. Gramm-Leach-Bliley Act: Financial Privacy and Pretexting, November 12 1999. Available at www.ftc.gov/privacy/glbact/glboutline.htm.
20. E-Commerce Times. Toys 'R' Us Sued for Net Privacy Violations, July 2001. www.ecommercetimes.com/perl/story/3957.html.
21. TRUSTe. Privacy Certification. Available at www.truste.com.
22. European Union. The European Union Directive 95/46/EC: On The Protection Of Individuals With Regard To The Processing Of Personal Data And On The Free Movement Of Such Data, February 20 1995. Available at www.privacy.org/pi/intl-orgs/ec/eudp.html.
23. W3C. Platform for Privacy Preferences. Available at www.w3.org/P3P.
24. WatchFire. WatchFire WebCPO: WebSite Privacy Management Software. Available at www.watchfire.com/solutions/webcpo.asp.
25. WebVeil. WebVeil Web Proxy. www.webveil.com.