Proposal of privacy policy matching engine

ABSTRACT

We propose a system called "Privacy Policy Matching Engine", which enables a matching of a user's intention to provide his/her identity-related data and enterprises' privacy policies. This engine automatically analyzes the policies with a focus on the types and the handling of the identity-related data provided by the user when browsing the enterprise's websites or shopping online. This system is designed to allow users to create "user policies" for personal data protection (users' intentions to provide their identity-related data), just as enterprises have policies describing enterprises' intention to consume the data. The aim of this system is to encourage users to take the initiative in selecting business entities that the user feels comfortable with by simply matching user policies and privacy policies.

This document describes the concept of the matching engine and the prototype.

REFERENCES

• 1: Babaguchi, N. and S. Yamada. Jinkou chinou no kiso {Basic of Artificial Intelligence}. Shokodo Co., Ltd, 1999.
• 2: Lorrie Faith Cranor , Praveen Guduru , Manjula Arjula, User interfaces for privacy agents, ACM Transactions on Computer-Human Interaction (TOCHI), v.13 n.2, p.135-178, June 2006 [doi>10.1145/1165734.1165735]
• 3: DEN Yasuharu, YAMADA Atsushi, OGURA Hideki, KOISO Hanae, and OGISO Toshinobu, "UniDic-chasen http://www.tokuteicorpus.jp/dist/.
• 4: Doc Searls, "ProjectVRM", http://cyber.law.harvard.edu/projectvrm/Main_Page.Bowman.
• 5: Serge Egelman , Lorrie Faith Cranor , Abdur Chowdhury, An analysis of P3P-enabled web sites among top-20 search results, Proceedings of the 8th international conference on Electronic commerce: The new e-commerce: innovations for conquering current barriers, obstacles and limitations to conducting successful business on the internet, August 13-16, 2006, Fredericton, New Brunswick, Canada [doi>10.1145/1151454.1151492]
• 6: Google, Google Search Engine, http://www.google.co.jp/.
• 7: goto, Ebot Lite, http://www.listbrowser.com/.
• 8: Hayashi, K. Saishin netto koukoku no shikumi {System of Latest Net Advertisement}. Nippon Jitsugyo Publishing, 2007.
• 9: hishida, xdoc2txt, http://www31.ocn.ne.jp/~h_ishida/xdoc2txt.html.
• 10: Itakura, Y., T. Kojima, and I. Miyaki. "A Proposal of an Architecture for Effective Utilization of Personal Information" (written in Japanese) The 2008 Symposium on Cryptography and Information Security Miyazaki, Japan, Jan. 22--25, 2008, The Institute of Electronics, Information and Communication Engineers.
• 11: ITmedia Inc., "Insider's Computer Dictionary P3P," http://www.atmarkit.co.jp/icd/root/03/15245403.html.
• 12: Carlos Jensen , Colin Potts, Privacy policies as decision-making tools: an evaluation of online privacy notices, Proceedings of the SIGCHI conference on Human factors in computing systems, p.471-478, April 24-29, 2004, Vienna, Austria [doi>10.1145/985692.985752]
• 13: Nagao, M. and M. Iri. Iwanami jouhou kagaku 23 -- Kazu to siki no bun no syori {Iwanami Lecture of Information Sciences 23 -- Processing of sentence of number and expression}. Iwanami Shoten, 1981.
• 14: Namatame, A. Maruchi eijento to hukuzatukei {Multiagent and Complex System}. Morikita Publishing Co., Ltd., 1998
• 15: Oda, K., N. Takahiro, S. Suda, and T. Yukawa. Jisedai koukoku tekunorozi {Next-generation Advertising Technology}. SOFTBANK Creative, 2007.
• 16: Privacy Rating Jimukyoku, A.F. Westin, ed., White Paper on the Privacy in Japan 2007 (written in Japanese). Yano Research Institute Ltd., 2006.
• 17: W3C "Platform for Privacy Preferences(P3P)," http://www.w3c.org/P3P/.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)
          Subjects: Evaluation/methodology

Additional Classification:
  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.3 Information Search and Retrieval
          Subjects: Retrieval models
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)
          Subjects: User-centered design
      H.5.4 Hypertext/Hypermedia
          Subjects: User issues

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

General Terms:
Design, Human Factors, Legal Aspects, Management, Measurement, Security

Keywords:
identity-related data, privacy policy, search engine, vendor relationship management