Risk Evaluation for Personal Identity Management Based on Privacy Attribute Ontology

  • Authors:
  • Mizuho Iwaihara;Kohei Murakami;Gail-Joon Ahn;Masatoshi Yoshikawa

  • Affiliations:
  • Department of Social Informatics, Kyoto University, Japan;Department of Social Informatics, Kyoto University, Japan;Department of Computer Science and Engineering, Arizona State University, USA;Department of Social Informatics, Kyoto University, Japan

  • Venue:
  • ER '08 Proceedings of the 27th International Conference on Conceptual Modeling
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Identity providers are becoming popular for distributed authentication and distributed identity management. Users' privacy attributes are stored at an identity provider and they are released to a service provider upon user's consent. Since a broad range of privacy information of different sensitiveness can be exchanged in advanced web services, it is necessary to assist users by presenting potential risk on financial and personality damage, before releasing privacy attributes. In this paper, we present a model of privacy attribute ontology and risk evaluation method on this ontology. Then we formalize several matching problems which optimize similarity scores of matching solutions under several different types of risk constraints. We show sophisticated polynomial-time algorithms for solving these optimization problems.