Extending SQL to allow the active usage of purposes

Authors:
Wynand van Staden;Martin S. Olivier
Affiliations:
Information and Computer Security Architecture Research Group, University of Pretoria, Pretoria, South Africa;Information and Computer Security Architecture Research Group, University of Pretoria, Pretoria, South Africa
Venue:
TrustBus'06 Proceedings of the Third international conference on Trust, Privacy, and Security in Digital Business
Year:
2006

Citing 9
Cited 0

Extensible/rule based query rewrite optimization in Starburst

SIGMOD '92 Proceedings of the 1992 ACM SIGMOD international conference on Management of data
Data security

Data & Knowledge Engineering - Special jubilee issue: DKE 25
An authorization mechanism for a relational database system

ACM Transactions on Database Systems (TODS)
E-P3P privacy policies and privacy authorization

Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society
Extending SQL's Grant and Revoke Operations, to Limit and Reactivate Privileges

Proceedings of the IFIP TC11/ WG11.3 Fourteenth Annual Working Conference on Database Security: Data and Application Security, Development and Directions
Purpose based access control of complex data for privacy protection

Proceedings of the tenth ACM symposium on Access control models and technologies
Hippocratic databases

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
Limiting disclosure in hippocratic databases

VLDB '04 Proceedings of the Thirtieth international conference on Very large data bases - Volume 30
IT-security and privacy: design and use of privacy-enhancing security mechanisms

IT-security and privacy: design and use of privacy-enhancing security mechanisms

Quantified Score

Hi-index	0.01

Visualization

Abstract

The protection of private information revolves around the protection of data by making use of purposes. These purposes indicate why data is stored, and what the data will be used for (referred to as specification/verification phases). In this article, the active specification of purposes during access requests is considered. In particular it is argued that the subject that wishes to get access to data should explicitly specify their reason for wanting the data; as opposed to verification taking place by implicit examination of the subject’s profile. To facilitate this active specification extensions to the SQL data manipulation language is considered.