Purpose based access control of complex data for privacy protection

As privacy becomes a major concern for both consumers and enterprises, many research efforts have been devoted to the development of privacy protecting technology. We recently proposed a privacy preserving access control model for relational databases, where purpose information associated with a given data element specifies the intended use of the data element. In this paper, we extend our previous work to handle other advanced data management systems, such as the ones based on XML and the ones based on the object-relational data model. Another contribution of our paper is that we address the problem of how to determine the purpose for which certain data are accessed by a given user. Our proposed solution relies on the well-known RBAC model as well as the notion of conditional role which is based on the notions of role attribute and system attribute. Categories and Subject Descriptors D.4.6 [Operating Systems]: Security and Protection—Access Controls; E.2 [K.6 Management of Comput...

• Type: Conference
• Year: 2005
• Where: SACMAT
• Authors: Ji-Won Byun, Elisa Bertino, Ninghui Li
• Keywords: Data Element, Data Management, Privacy Protecting Technology, SACMAT 2005