Using AOP-based enforcement of prioritised XACML policies for location privacy

Authors:
Thomas Scheffler;Sven Schindler;Bettina Schnor
Affiliations:
Department of Electrical Engineering, Beuth Hochschule für Technik Berlin, Luxemburger Str. 10, D-13353 Berlin, Germany;Institute of Computer Science, Potsdam University, August-Bebel-Str. 89, D-14482 Potsdam, Germany;Institute of Computer Science, Potsdam University, August-Bebel-Str. 89, D-14482 Potsdam, Germany
Venue:
International Journal of Internet Technology and Secured Transactions
Year:
2013

Citing 5
Cited 0

Conflicts in Policy-Based Distributed Systems Management

IEEE Transactions on Software Engineering
Towards Accountable Management of Identity and Privacy: Sticky Policies and Enforceable Tracing Services

DEXA '03 Proceedings of the 14th International Workshop on Database and Expert Systems Applications
Going beyond the sandbox: an overview of the new security architecture in the javaTM development Kit 1.2

USITS'97 Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems
Privacy from promises to protection: privacy guaranteeing execution container

Mobile Networks and Applications
A privacy-aware localization service for healthcare environments

Proceedings of the 4th International Conference on PErvasive Technologies Related to Assistive Environments

Quantified Score

Hi-index	0.00

Visualization

Abstract

Location-based services have become more and more popular over the last years and allow the tracking of persons and goods. Users of these services often have little control over their private data as it is accessed, processed and stored. This paper presents a privacy enforcement concept that combines a sticky-policy approach with an aspect-oriented programming-based reference monitor. Furthermore, we introduce prioritised policies which allow users to define their own access rules without accidentally generating inconsistent rule sets. For the implementation of this concept, we propose a new XACML combining algorithm, the priority policy combining algorithm. We demonstrate the feasibility and ease-of-use of our concept with the example of a theme-park location service.