End-to-end privacy control in service outsourcing of human intensive processes: A multi-layered Web service integration approach

  • Authors:

  • Patrick C. Hung;Dickson K. Chiu;W. W. Fung;William K. Cheung;Raymond Wong;Samuel P. Choi;Eleanna Kafeza;James Kwok;Joshua C. Pun;Vivying S. Cheng

  • Affiliations:

  • Faculty of Business and Information Technology, University of Ontario Institute of Technology, Osahwa, Canada;Dickson Computer Systems, Kowloon, Hong Kong;Department of Computer Science, The Hong Kong University of Science and Technology, Kowloon, Hong Kong;Department of Computing, Hong Kong Baptist University, Kowloon, Hong Kong;School of Computer Science and Engineering, University of New South Wales, Sydney, Australia;School of Business and Administration, The Open University of Hong Kong, Kowloon, Hong Kong;Department of Marketing and Communications, Athens University of Economics and Business, Athens, Greece;Department of Computer Science, The Hong Kong University of Science and Technology, Kowloon, Hong Kong;Department of Computer Science, The Hong Kong University of Science and Technology, Kowloon, Hong Kong;Department of Computer Science, The Hong Kong University of Science and Technology, Kowloon, Hong Kong

  • Venue:
  • Information Systems Frontiers
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

With the recent adoption of service outsourcing, there have been increasing general demands and concerns for privacy control, in addition to basic requirement of integration. The traditional practice of a bulk transmission of the customers' information to an external service provider is no longer adequate, especially in the finance and healthcare sectors. From our consultancy experience, application-to-application privacy protection technologies at the middleware layer alone are also inadequate to solve this problem, particularly when human service providers are heavily involved in the outsourced process. Therefore, we propose a layered architecture and a development methodology for enforcing end-to-end privacy control policies of enterprises over the export of personal information. We illustrate how Web services, augmented with updated privacy facilities such as Service Level Agreement (SLA), Platform for Privacy Preferences Project (P3P), and the P3P Preference Exchange Language (APPEL), can provide a suitable interoperation platform for service outsourcing. We further develop a conceptual model and an interaction protocol to send only the required part of a customer's record at a time. We illustrate our approach for end-to-end privacy control in service outsourcing with a tele-marketing case study and show how the software of the outsourced call center can be integrated effectively with the Web services of a bank to protect privacy.