Preserving Privacy Based on Semantic Policy Tools
Name
Kagal-2010-Preserving Privacy B.pdf
Size
3.61 MB
Format
Adobe PDF
Checksum (MD5)
fb15e420a0a36292298d6e8cf6ebb2c6
Author(s)
Kagal, Lalana
Pato, Joseph
Date Issued
July 2010
Journal
IEEE Security & Privacy Magazine
Publisher
IEEE Computer and Reliability Societies
Citation
Kagal, Lalana, and Joseph Pato. “Preserving Privacy Based on Semantic Policy Tools.” IEEE Security & Privacy Magazine 8.4 (2010): 25–30. Web.© 2010 IEEE.
Version
Final published version
Abstract
Different organizations are constantly collecting, analyzing, and storing individuals' private data: shopping sites want to provide better service and recommendations, hospitals to improve healthcare, and government agencies to enable national defense and law enforcement. Sharing data lets these organizations discover important knowledge and draw useful conclusions but raises concerns about information privacy and trust. Until recently, the focus was on restricting access to data on a "need-to-know" basis, but since the 9/11 Commission, the paradigm has shifted to a "need to share." The authors explore the use of semantic privacy policies, justifications for data requests, and automated auditing to encourage sharing of sensitive data between organizations. They describe an architecture based on policy tools that evaluate incoming queries against semantic policies and domain knowledge and provide a justification for each query-why they're permitted, denied, or inapplicable. Using a semantic policy language gives policies explicit semantics that allow all participants to unambiguously understand their meaning. The justifications generated by checking incoming requests against these policies help requesters formulate privacy-aware queries. Reasoning over event logs and justifications allows data owners to verify that their privacy policies are being correctly enforced.
MIT Department
Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Terms of Use
Article is made available in accordance with the publisher's policy and may be subject to US copyright law. Please refer to the publisher's site for terms of use.
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1109/MSP.2010.89
