Privacy through Pseudonymity in User-Adaptive Systems

ACM Transactions on Internet Technology

Volumn 3, Issue 2, 2003, Pages 149-183

  Kobsa, Alfred ^a   Schreck, Jörg ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF DUISBURG ESSEN   (Germany)

Author keywords

access control; anonymity; Chaum mix; encryption; Human Factors; KQML; personal information; personalization; privacy; pseudonymity; reference model; secrecy; Security; security; User modeling; user adaptive systems

Indexed keywords

EID: 85016682337     PISSN: 15335399     EISSN: 15576051     Source Type: Journal    
DOI: 10.1145/767193.767196     Document Type: Article

References (101)

1. Anonymous. 1996. Risks of anonymity. Commun. ACM 39, 12, 162.
2. Art Technology Group. 2001. Atg dynamo e-business platform. http://www.atg.com/products.
3. Barkley, J. F., Cincotta, A. V., Ferraiolo, D. F., Gavrilla, S., and Kuhn, D. R. 1997. Role based access control for the world wide web. In Proceedings of the 20th National Information System Security Conference (NIST/NSA).
4. Bell, D. and Lapadula, L. 1976. Secure computer systems: Unified exposition and multics interpretation. Tech. Rep. MTR 2997. Mitre Corporation, Bedford, Mass.
5. Bell, D. E. 1988. Concerning“modeling” of computer security. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif. Apr. 18-21). IEEE Computer Society Press, Los Alamitos, Calif.
6. Berthold, O., Federrath, H., and Kohntopp (Hansen), M. 2000. Project“Anonymity and unobservability in the internet” In Proceedings of the 10th Conference on Computers, Freedom & Privacy 2000 (Westin Harbour Castle, Toronto, Ont., Canada, Apr. 4-7), 57-68.
7. Berthold, O. and Kohntopp (Hansen), M. 2001. Identity management based on P3P. In Anonymity 2000, H. Federrath, Ed. Lecture Notes in Computer Science, vol. 2009. Springer-Verlag, Berlin-Heidelberg, Germany, 141-160.
8. Boston Consulting Group. 1997. Etrust Internet Privacy Study: Summary of Market Survey Results. Tech. rep.
9. Boston Consulting Group. 2002. The State of Retailing Online 5.0. Shop. org, http://www.shop. org.
10. Brewer, D. F. and Nash, M. J. 1989. The chinese wall security policy. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., May 1-3). IEEE Computer Society Press, Los Alamitos, Calif., 206-214.
11. Brusilovsky, P. 1998. Methods and techniques of adaptive hypermedia. In Adaptive Hypertext and Hypermedia, P. Brusilovsky, A. Kobsa, and J. Vassileva, Eds. Kluwer Academic Publishers, Dordrecht, Netherlands, 1-43.
12. Chaum, D. L. 1981. Untraceable electronic mail, return addresses, and digital pseudonyms. Commun. ACM 24, 2, 84-88.
13. Chin, D. N. 1993. Acquiring user models. Artif. Intel. Rev. 7, 3-4, 185-197.
14. Claub, S. and Kohntopp (Hansen), M. 2001. Identity management and its support of multilateral security. Computer Netw. 37, 205-219.
15. Covington, M. A. 1998. Speech acts, electronic commerce, and KQML. Deci. Supp. Syst. 22, 3, 203-211.
16. Cranor, L., Langheinrich, M., and Marchiori, M. 2002a. A P3P preference exchange language 1.0 (APPEL 1.0): W3C working draft 15 April 2002. http://www.w3.org/tr/p3p-preferences/World Wide Web Consortium.
17. Cranor, L., Langheinrich, M., Marchiori, M., Presler-Marshall, M., and Reagle, J. 2002b. The platform for privacy preferences 1.0 (P3P1.0) specification: W3C recommendation 16 April 2002. http://www.w3.org/tr/p3p/, World Wide Web Consortium.
18. Cranor, L. F., Reagle, J., and Ackerman, M. S. 1999. Beyond concern: Understanding net users' attitudes about online privacy. Att labs-research technical report TR 99.4.3, http://www.research.att.eom/library/trs/trs/99/99.4/.
19. CSA 1996. Model Code for the Protection of Personal Information. Tech. rep., Canadian Standards Association. http://www.csa.ca/standards/privacy/code/.
20. Culnan, M. J. and Milne, G. R. 2001. The Culnan-Milne survey on consumers & online privacy notices: Summary of responses. In Interagency Public Workshop: Get Noticed: Effective Financial Privacy Notices (Washington, D.C., Dec. 4, 2001). 47-54.
21. Denning, D. E. 1976. A lattice model of secure information flow. Commun. ACM 19, 5, 236-243.
22. Denning, D. E. R. 1982. Cryptography and Data Security. Addison-Wesley, Reading, Mass.
23. Depallo, M. 2000. Aarp national survey on consumer preparedness and e-commerce: A survey of computer users age 45 and olDer. Tech. rep., Aarp, Washington, D.C.
24. Domingo-Ferrer, J. 2002. Inference Control in Statistical Databases: From Theory to Practice. Springer, Berlin, Heidelberg, New York.
25. EC 1995. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Official Journal of the European Communities of 23 November 1995 No L. 281.
26. EC 2002. Directive 2002/58/EC of the European Parliament and of the Council of 24 october 1995 Concerning the Processingof Personal Data and the Protection of Privacy in the Electronic Communications Sector. Official Journal of the European Communities of 31 July 2002 No L 201/37.
27. Ferraiolo, D. F., Barkley, J. F., and Kuhn, D. R. 1999. A role-based access control model and reference implementation wIthin a corporate intranet. ACM Trans. Inf. Syst. Sec. 2, 1, 34-64.
28. Finin, T. and Weber, J. 1993. Draft specification of the Kqml agent-communication language. Tech. Rep.
29. Finin, T. W. 1989. Gums-A general user modeling shell. In User Models in Dialog Systems, A. Kobsa and W. Wahlster, Eds. Springer, Berlin, Heidelberg, New York, 411-430.
30. Fink, J. 2003. User modeling servers: Requirements, design, and evaluation. Ph.D. dissertation, Department of Mathematics and Computer Science, University of Essen, Germany.
31. Fink, J. and Kobsa, A. 2000. A review and analysis of commercial user modeling servers for personalization on the world wide web. User Mod. User-Adapted Interact. 10, 3-4, 209-249. http://www.ics.uci.edu/~kobsa/papers/2000-UMUAI-kobsa.pdf.
32. Fink, J. and Kobsa, A. 2002. User Modeling in personalized city tours. Artif. Intel. Rev. 18, 1, 33-74.http://www.ics.uci.edu/~kobsa/papers/2002-AIR-kobsa.pdf.
33. Fink, J., Kobsa, A., and Nill, A. 1998. Adaptable and adaptive information provision for all users, including disabled and elderly people. In New Review of Hypermedia and Multimedia 4. Taylor Graham, London, 163-188. http://www.ics.uci.edu/~kobsa/papers/1998-Nrhm-kobsa.pdf.
34. Fink, J., Koenemann, J., Noller, S., and Schwab, I. 2002. Putting personalization into practice. Commun. ACM 45, 5, 41-42.
35. Flinn, B. and Maurer, H. 1995. Levels of anonymity. J. Univ. Comput. Sci. 1, 1, 35-47.
36. Forrester Research. 1999. The privacy best practise. Tech. rep., Cambridge, Mass.
37. FOX, S. 2000. Trust and privacy online: Why Americans want to rewrite the rules. Tech. rep. The Pew Internet & American Life Project, Washington, D.C.
38. Freier, A. O., Karlton, P., and Kocher, P. C. 1996. The SSL protocol, version 3.0. Tech. rep., Netscape Communications Company.
39. Gabber, E., Gibbons, P. B., Kristol, D. M., Matias, Y., and Mayer, A. 1999. Consistent, yet anonymous, web access with LPWA. Commun. ACM 42, 2, 42-47.
40. Gabber, E., Gibbons, P. B., Matias, Y, and Mayer, A. 1997. How to make personalized web browsing simple, secure, and anonymous. In Financial Cryptography, Proceedings of the 1st International Conference (FC'97) (Anguilla, British West Indies, February 24-28). R. Hirschfeld, Ed. Springer-Verlag, New York, 17-31.
41. Gavish, B. and Gerdes, J. H. 1998. Anonymous mechanisms in group decision support systems communication. Dec. Supp. Syst. 23, 4, 297-328.
42. Goguen, J. and Meseguer, J. 1982. Security policies and security models. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., Apr. 26-28). IEEE Computer Society Press, Los Alamitos, Calif., 11-20.
43. Goguen, J. A. and Meseguer, J. 1984. Unwinding and inference control. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., Apr. 29-May 2). IEEE Computer Society Press, Los Alamitos, Calif., 75-86.
44. Goldschlag, D., Reed, M., and Syverson, P. 1999. Onion Routing for anonymous and private internet connections. Commun. ACM 42, 2, 39-41.
45. Gulcu, C. and Tsudik, G. 1996. Mixing email with Babel. In Proceedings of the Internet Society Symposium on Network and Distributed Systems Security (Sndss'96) (San Diego, Calif., Feb. 22-23). IEEE Computer Society Press, Los Alamitos, Calif., 2-16.
46. GVU 1998. GVU's tenth WWW user survey. Tech. rep., Graphics, Visualization, & Usability Center, College of Computing, Georgia Institute of Technology, Atlanta, Ga. http://www.cc. gatech.edu/gvu/user_surveys/survey-1998-10/.
47. HIRSCH, F. J. 1997. Introducing SSL and certificates using SSLeay. WWW J., 141-173.
48. IBM. 1999. IBM multi-national consumer privacy survey, http://www.ibm.com/services/files/privacy_survey_oct991.pdf.
49. ISO. 1999. ISO/IEC 15408-2, Information technology-Security techniques-Evaluation criteria for IT Security: Part 2: Security functional requirements.
50. Jendricke, U. and Gerd Tom Markotten, D. 2000. Usability meets security: The identity-manager as your personal security assistant for the internet. In Proceedings of the 16th Annual Computer Security Applications Conference (New orleans, La).
51. Jeon, H., Petrie, C., and Cutkosky, M. R. 2000. Jatlite: A java agent infrastructure with message routing. IEEE Inter. Comput. 4, 2, 87-96.
52. Jerichow, A. 1999. Generalisation and security-improvement of mix-mediated anonymous communication. Ph.D. dissertation. Department of Computer Science, Dresden University of Technology, Dresden Germany.
53. Kass, R. 1991. Building a user model implicitly from a cooperative advisory dialog. User Mod. User-Adapted Interact. 1, 3, 203-258.
54. Kay, J. 1995. The um toolkit for cooperative user modelling. User Mod. User-Adapted Interact. 4, 3, 149-196.
55. Kessler, V. 1992. On the Chinese wall model. In Computer Security-ESORICS 92, Proceedings of the 2nd European Symposium on Research in Computer Security (Toulouse, France, Nov. 23-25). Y. Deswarte, G. Eizenberg, and J.-J. Quisquater, Eds. Springer-Verlag, New York, 41-54.
56. Kilian, J. and Petrank, E. 1998. Identity escrow. In Advances in Cryptology (CRYPTO '98) (Santa Barbara, Calif.), H. Krawczyk, Ed. Lecture Notes in Computer Science, vol 1462. Springer-Verlag, Berlin, Heidelberg, New York, 169-185.
57. Kobsa, A. 1993. User modeling: Recent work, prospects and hazards. In Adaptive User Interfaces: Principles and Practice, T. K. M. Schneider-Hufschmidt and U. Malinowski, Eds. North-Holland, Amsterdam, The Netherlands, 111-128.
58. Kobsa, A. 2001a. Generic user modeling systems. User Mod. User-Adapted Interact. 11, 1-2, 49-63. http://www.ics.uci.edu/~kobsa/papers/2001-UMUAI-kobsa.pdf.
59. Kobsa, A. 2001b. Tailoring privacy to users' needs (invited keynote). In User Modeling 2001: 8th International Conference, M. Bauer, P. J. Gmytrasiewicz, and J. Vassileva, Eds. Springer, Berlin, Heidelberg, New York, 303-313. http://www.ics.uci.edu/kobsa/papers/2001-UM01-kobsa.pdf.
60. Kobsa, A. 2002. Personalized hypermedia and international privacy. Commun. ACM 45, 5, 64-67. http://www.ics.uci.edu/~kobsa/papers/2002-CACM-kobsa.pdf.
61. Kobsa, A., Koenemann, J., and Pohl, W. 2001. Personalized Hypermedia presentation techniques for improving online customer relationships. The Knowl. Eng. Rev. 16, 2, 111-155. http://www.ics.uci.edu/~kobsa/papers/2001-KER-kobsa.pdf.
62. Kobsa, A. and Pohl, W. 1995. The user modeling shell system BGP-MS. User Mod. User-Adapted Interact. 4, 2, 59-106.
63. Kobsa, A., Pohl, W., and Fink, J. 1996. A standard for the performatives in the communication between applications and user modeling systems (draft). http://www.ics.uci.edu/~kobsa/papers/1996-kobsa-pohl-fink-rfc.pdf.
64. Labrou, Y. and Finin, T. 1997. A proposal for a new Kqml specification. Tech. rep., Computer Science and Electrical Engineering Department, University of Maryland, Baltimore County, Md.
65. Mabley, K. 2000. Privacy Vs. Personalization: Part Iii. Tech. Rep. Cyber Dialogue, Inc. http://www.cyberdialogue.com/library/pdfs/wp-cd-2000-privacy.pdf.
66. Machado, I., Martins, A., and Paiva, A. 1999. One for all and all in one: A learner modelling server in a multi-agent platform. In User Modeling, Proceedings of the 7th International Conference (UM99) (Banff, Canada, June 20-24), J. Kay, Ed. Springer-Verlag, Wien, New York, 211-221.
67. Manna. 2001. Frontmind. http://www.mannainc.com/products.html.
68. Mazieres, D. and Kaashoek, M. F. 1998. The design, implementation and operation of an email pseudonym server. In Proceedings of the 5th ACM Conference on Computer and Communications Security (San Francisco, Calif., Nov. 2-5). ACM, New York, 27-36.
69. Net Perceptions. 2002. Net Perceptions. http://www.netperceptions.com.
70. Network Advertising Initiative. 2000. Self-regulatory principles for online preference marketing by network advisers. http://www.ftc.gov/os/2000/07/nai 7-10 final.pdf.
71. Oecd 1992. Guidelines for the Security of Information Systems. Tech. Rep. Organisation for Economic Cooperation and Development (OECD).
72. Orwant, J. 1995. Heterogeneous learning in the Doppelganger user modeling system. User Mod. User-Adapted Interact. 4, 2, 107-130.
73. Paiva, A. and Self, J. 1995. Tagus-A user and learner modeling workbench. User Mod. User-Adapted Interact. 4, 3197-226.
74. Personalization Consortium. 2000. Personalization & Privacy Survey. Tech. Rep. Personalization Consortium, Edgewater Place, Mass, http://www.personalization.org/SurveyResults.pdf.
75. Petrie, C. J. 1996. Agent-based engineering, the web, and intelligence. Ieee Expert 11, 6, 24-29.
76. Pfitzmann, A. and Kohntopp (Hansen), M. 2001. Anonymity, unobservability, and pseudonymity: A proposal for terminology. In Anonymity 2000, H. Federrath, Ed. Lecture Notes in Computer Science, vol. 2009. Springer-Verlag, Berlin-Heidelberg, Germany, 1-9.
77. Pfleeger, C. P. 1989. Security in Computing. Prentice-Hall, Englewood Cliffs, N.J.
78. Pohl, W. 1998. Logic-Based Representation and Reasoning for User Modeling Shell Systems. Academic Publishing Corporation-Infix, Berlin, Germany.
79. Posner, R. A. 1984. An economic theory of privacy. In Philosophical Dimensions of Privacy, F. Schoeman, Ed. Cambridge University Press, 333-345.
80. Ramakrishnan, N., Keller, J. B., Mirza, B. J., Grama, A. Y., and Karypis, G. 2001. Privacy risks in recommender systems. IEEE Internet Comput. Nov.-Dec., 54-62.
81. Reagle, J. and Cranor, L. F. 1999. The platform for privacy preferences. Commun. ACM 42, 2, 48-55.
82. Reiter, M. K. and Rubin, A. D. 1998. Crowds: Anonymity for web transactions. ACM Trans. act. Inf. Syst. Sec. 1, 1, 66-92.
83. Reiter, M. K. and Rubin, A. D. 1999. Anonymous web transactions with crowds. Commun. ACM 42, 2, 32-38.
84. Rich, E. 1979a. Building and exploiting user models. In Proceedings of the 6th International Joint Conference on Artificial Intelligence (IJCAI'79) Vol. 2 (Tokyo, Japan, Aug. 20-23). 720-722.
85. Rich, E. 1979b. User modeling via stereotypes. Cogn. Sci. 3, 329-354.
86. Rich, E. 1983. Users are individuals: Individualizing user models. Int. J. Man-Machine Stud. 18, 199-214.
87. Rotenberg, M. 2002. The Privacy Law Sourcebook 2002. Electronic Privacy Information Center, Washington DC.
88. Sandhu, R., Coyne, E. J., Feinstein, H. L., and Youman, C. E. 1996. Role-based access control models. IEEE Comput. 2, 2, 38-47.
89. Schafer, J. B., Konstan, J. A., and Riedl, J. 2001. E-Commerce Recommendation Applications. Data Min. Knowl. Disc. 5, 1, 115-153.
90. Schreck, J. 2003. Security and Privacy in User Modeling. Kluwer Academic Publishers, Dordrecht, Netherlands. http://www.security-and-privacy-in-user-modeling.info.
91. Simmons, G. J. 1992. Contemporary Cryptology, The Science of Information Integrity. IEEE Press, Los Alamitos, Calif.
92. Sleeman, D. 1985. Umfe: A User Modelling Front-End Subsystem. Inter. J. Man-Machine Stud. 23, 71-88.
93. Spiekermann, S., Grossklags, J., and Berendt, B. 2001. E-privacy in 2nd generation e-commerce: Privacy preferences versus actual behavior. In EC'01: Proceedings of the 3rd ACM Conference on Electronic Commerce. ACM, New York, 38-47.
94. Summers, R. C. 1997. Secure Computing, Threats and Safeguards. McGraw-Hill, New York.
95. Syverson, P. F., Goldschlag, D. M., and Reed, M. G. 1997. Anonymous connections and onion routing. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., May 4-7). IEEE Computer Society Press, Los Alamitos, Calif., 44-54.
96. Tsdp 2001. Act on the protection of personal data used in teleservices (Article 3 of the law on the legal requirements for electronic business dealings of 14 Dec. 2001). German Federal Law Gazette 1, 3721.http://www.iid.de/iukdg/aktuelles/fassung_tddsg_eng.pdf.
97. Warren, S. D. and Brandeis, L. D. 1890. The right to privacy. Harvard Law Review IV, 5, 193-220.
98. Westin, A. F. 1970. Privacy and Freedom. Atheneum.
99. Westin, A. F. and Maurici, D. 1998. E-commerce & privacy: What net users want. http://www.pwcglobal.com/gx/eng/svcs/privAcy/images/e-commerce.pdf.
100. Wolf, G. and Pfitzmann, A. 1999. Empowering users to set their security goals. In Multilateral Security for Global Communication-Technology, Application, Business, G. Mller and K. Rannenberg, Eds. Addison-Wesley-Longman, Berlin-Heidelberg, Germany, 113-135.
101. Zurfluh, U. E. 1998. People, their Roles, and their Action Potential in Electronic Environments (in German). In Sicherheit in Informationssystemen, Proceedings der Fachtagung SIS'98, Universitat Hohenheim, Germany, 26.-27.3., K. Bauknecht, A. Bullesbach, H. Pohl, and S. Teufel, Eds. Hochschulverlag AG ETH Zurich, 43-64.