Conceptual Modeling of Privacy-Aware Web Service Protocols

Abstract. Internet users are becoming increasingly concerned about their personal information being collected and used by Web service providers. They want to ensure that it is stored and used according to the providers’ privacy policies. Since these policies are mainly developed and maintained separately from the business process that collects and manipulates data, it is hard to perform analysis and management of the processes in terms of privacy policies. To address this problem, we propose a formal technique with which Web service providers describe the use and storage of personal data. The description is integrated with a Web service protocol using an extended state machine model. Having such a conceptual model will enable model-driven development and management of Web service protocols with respect to their privacy aspects such as collection, disclosure, and obligation. A tool support has been implemented, as part of ServiceMosaic, to let designers model privacy aspects within th...

• Type: Conference
• Year: 2007
• Where: CAISE
• Authors: Rachid Hamadi, Hye-Young Paik, Boualem Benatallah
• Keywords: CAISE 2007, Privacy Policies, Web Service, Web Service Protocols