An identifiability-based access control model for privacy protection in open systems

ABSTRACT

We argue that in open systems one's private information disclosure needs to be dynamically controlled based on both its sensitivity and the possibility that a user's identity is revealed. Then we propose an identifiability-based access control scheme, which not only properly control usrers' private information, but also increase users' access to web services.

REFERENCES

• 1: Joachim Biskup , Piero A. Bonatti, Controlled Query Evaluation for Known Policies by Combining Lying and Refusal, Proceedings of the Second International Symposium on Foundations of Information and Knowledge Systems, p.49-66, February 20-23, 2002
• 2: Stefan A. Brands, Rethinking Public Key Infrastructures and Digital Certificates: Building in Privacy, MIT Press, Cambridge, MA, 2000
• 3: Alexander Brodsky , Csilla Farkas , Sushil Jajodia, Secure Databases: Constraints, Inference Channels, and Monitoring Disclosures, IEEE Transactions on Knowledge and Data Engineering, v.12 n.6, p.900-919, November 2000 [doi>10.1109/69.895801]
• 4: Jan Camenisch , Els Van Herreweghen, Design and implementation of the idemix anonymous credential system, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586114]
• 5: K. Irwin and T. Yu. An Identifiability-based Access Control for Privacy Protection in Open Systems. In http://www.csc.ncsu.edu/faculty/pubs/IAC.pdf, April 2004.
• 6: N. Li and J.C. Mitchell. RT: A Role-based Trust-management Framework. In DARPA Information Survivability Conference and Exposition (DISCEX), Washington, D.C., April 2003.
• 7: Latanya Sweeney, k-anonymity: a model for protecting privacy, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.10 n.5, p.557-570, October 2002 [doi>10.1142/S0218488502001648]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Security

Keywords:
identifiability-based access control