Platform for enterprise privacy practices: Privacy-enabled management of customer data

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2482, Issue , 2003, Pages 69-84

  Karjoth, Günter ^a   Schunter, Matthias ^a   Waidner, Michael ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

LIFE CYCLE; PRIVACY BY DESIGN; SALES;

ACCESS CONTROL LANGUAGE; ACCESS CONTROL POLICIES; PRIVACY POLICIES; PRIVACY PRACTICES; PRIVACY STATEMENTS; PRIVACY SYSTEMS; SECURITY OFFICERS; SEPARATION OF DUTY;

ACCESS CONTROL;

EID: 84957805078     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-36467-6_6     Document Type: Conference Paper

References (12)

1. M. Abrams. Renewed understanding of access control policies. In 16th National Computer Security Conference, pages 87-96, 1993.
2. K. Beznosov: Information Enterprise Architectures: Problems and Perspectives. School of Computer Science, PhD Thesis, Florida International University, June 2000.
3. P. Bonatti, E. Damiani, S. De Capitani di Vimercati, and P. Samarati. An access control system for data archives. In 16th IFIP-TC11 International Conference on Information Security. Paris, France, June 2001.
4. K. Bohrer and B. Holland (eds.): The Customer Profile Exchange (CPexchange) Spec-ification; Version 1.0, International Digital Enterprise Alliance, October 20, 2000 (from www.cpexchange.org).
5. S. Fischer-Hübner: IT-Security and Privacy. Lecture Notes in Computer Science 1958, Springer-Verlag, 2001.
6. S. Hada and M. Kudo. XML Access Control Language: Provisional Authorization for XML Documents, Tokyo Research Laboratory, IBM Research, October 16, 2000 (from www.trl.ibm.com/projects/xml/xacl/).
7. S. Jajodia, M. Kudo, and V. S. Subrahmanian. Provisional authorization. In A. Ghosh, editor, E-commerce Security and Privacy, pages 133-159, Kluwer Academic Publishers, 2001. Also published in Workshop on Security and Privacy in E-Commerce (WSPEC), 2000.
8. G. Karjoth and M. Schunter. A Privacy Policy Model for Enterprises. In 15th IEEE Computer Security Foundations Workshop. IEEE Computer Society Press, 2002.
9. M. Kudo and S. Hada. XML Document Security based on Provisional Authorizations. In 7th ACM Conference on Computer and Communications Security, pages 87-96, 2000.
10. C. J. McCollum, J. R. Messing, and L. Notargiacomo. Beyond the pale of MAC and DAC - defining new forms of access control. In IEEE Symposium on Security and Privacy, pages 190-200, 1990.
11. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification, W3C Recommendation, 16 April 2002 (from www.w3.org/TR/2002/REC-P3P-20020416/).
12. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman: Role-based Access Control Models, IEEE Computer, 28/2 (1996) 38-47.