Abstract privacy policy framework: addressing privacy problems in SOA

Authors:
Laurent Bussard;Ulrich Pinsdorf
Affiliations:
European Microsoft Innovation Center, Aachen, Germany;European Microsoft Innovation Center, Aachen, Germany
Venue:
iNetSec'11 Proceedings of the 2011 IFIP WG 11.4 international conference on Open Problems in Network Security
Year:
2011

Citing 8
Cited 0

MPEG-21 Rights Expression Language: Enabling Interoperable Digital Rights Management

IEEE MultiMedia
Distributed Systems: Concepts and Design (4th Edition) (International Computer Science)

Distributed Systems: Concepts and Design (4th Edition) (International Computer Science)
A privacy-aware access control system

Journal of Computer Security - 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec'06)
Abductive Authorization Credential Gathering

POLICY '09 Proceedings of the 2009 IEEE International Symposium on Policies for Distributed Systems and Networks
SecPAL: Design and semantics of a decentralized authorization language

Journal of Computer Security - Digital Identity Management (DIM 2007)
Minimizing Disclosure of Private Information in Credential-based Interactions: A Graph-based Approach

SOCIALCOM '10 Proceedings of the 2010 IEEE Second International Conference on Social Computing
Downstream Usage Control

POLICY '10 Proceedings of the 2010 IEEE International Symposium on Policies for Distributed Systems and Networks
A practical generic privacy language

ICISS'10 Proceedings of the 6th international conference on Information systems security

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper argues that privacy policies in SOA needs a lifecycle model. We formalize the lifecycle of personal data and associated privacy policies in Service Oriented Architectures (SOA), thus generalizing privacy-friendly data handling in cross-domain service compositions. First, we summarize our learning in two research projects (PrimeLife and SecPAL for Privacy) by proposing generic patterns to enable privacy policies in SOA. Second, we map existing privacy policy technologies and ongoing research work to the proposed abstraction. This highlights advantages and shortcomings of existing privacy policy technologies when applied to SOA.