Enhancing Web Privacy Protection through Declarative Policies

  • Authors:
  • Pranam Kolari;Li Ding;Shashidhara G. Anupam Joshi;Tim Finin;Lalana Kagal

  • Affiliations:
  • University of Maryland at Baltimore County;University of Maryland at Baltimore County;University of Maryland at Baltimore County;University of Maryland at Baltimore County;Massachusetts Institute of Technology

  • Venue:
  • POLICY '05 Proceedings of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Platform for Privacy Preferences (P3P) is a W3C framework for web privacy management. It provides a standard vocabulary that websites can use to describe their privacy practices. The presence of website published P3P policies enable users to configure web browsers to allow, block or warn users during access and data exchange with web-sites. Itýs a good idea that unfortunately is rarely used. We identify three primary reasons: (i) the languages available to describe user privacy preferences are not sufficiently expressive, (ii) P3P policies published by websites are not trusted by users and (iii) P3P framework does not provide a coherent view of available privacy protection mechanisms to the user. Towards addressing these issues; we present enhancements to the P3P framework. We use a more expressive policy language based on deontic concepts to describe users privacy-related policies, constraints and preferences. We introduce a new trust model for websites and describe its use in user privacy preferences. Finally, we present sample policies to demonstrate the relevance of our work and offer it as an effective starting point towards enhancing Web Privacy management.