Purpose based access control of complex data for privacy protection
Proceedings of the tenth ACM symposium on Access control models and technologies
Personalization in privacy-aware highly dynamic systems
Communications of the ACM - Privacy and security in highly dynamic systems
Privacy-aware role based access control
Proceedings of the 12th ACM symposium on Access control models and technologies
VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
A middleware architecture for privacy protection
Computer Networks: The International Journal of Computer and Telecommunications Networking
Consistent privacy preferences (CPP): model, semantics, and properties
Proceedings of the 2008 ACM symposium on Applied computing
A three-layered model to implement data privacy policies
Computer Standards & Interfaces
P3P: Making Privacy Policies More Useful
IEEE Security and Privacy
Towards the development of privacy-aware systems
Information and Software Technology
ESORICS'05 Proceedings of the 10th European conference on Research in Computer Security
| Hi-index | 0.00 |
The growing concern of users for their personal information has made it critical to implant effective technologies for privacy and data privacy management. Most of the previous studies focus on Role Based Access Control model, and another approach is setting user preference separately rather than considering them together. However, the former one would lead inconvenience for users and the later one may result in conflicts or unconscious data disclosure after users setting their preferences. This paper proposes a privacy system using graph data structure to manage privacy data, limiting disclosure of data, guaranteeing high flexibility and facilitating the management of data. An important advantage of our approach is that it not only supports privacy-aware role based access control, but also permits users to clarify their privacy preferences. A full detailed view of a proper conversion from role-based privacy management to personal privacy preference management is provided.