S4P: A Generic Language for Specifying Privacy Preferences and Policies
نویسندگان
چکیده
This paper presents S4P, a declarative language for specifying both users’ privacy preferences and services’ privacy policies. Preferences and policies are uniformly expressed as assertions and queries written in SecPAL extended with two modal verbs, may and will, and can express both permissions and obligations. Checking if a user’s preference is satisfied by a service’s policy is simple as it only involves evaluating the queries against the assertions. Expressiveness and applicability are maximized by keeping the vocabulary and semantics of service behaviours abstract. The language’s model-theoretic semantics is given in terms of abstract service traces, and formalizes the notion of service compliance with respect to a policy or a
منابع مشابه
A Practical Generic Privacy Language
We present a declarative language with a formal semantics for specifying both users’ privacy preferences and services’ privacy policies. Expressiveness and applicability are maximized by keeping the vocabulary and semantics of service behaviours abstract. A privacy-compliant data-handling protocol for a network of communicating principals is described.
متن کاملA Framework for Privacy Preferences and Data-Handling Policies
This paper presents SecPAL4P, a language for specifying both users' preferences on how their personally identifiable information (PII) should be treated by data-collecting services, and services' policies on treating collected PIIs. Preferences and policies are specified in terms of granted rights and required obligations, expressed as assertions and queries in an instance of SecPAL (a language...
متن کاملResolving Conflicting Privacy Policies in M-health based on Prioritization
Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient’s care, conflicts among the privacy p...
متن کاملPrivacy Aware Recommender Service using Multi-agent Middleware- an IPTV Network Scenario
IPTV service providers are starting to realize the significant value of recommender services in attracting and satisfying customers as they offer added values e.g. by delivering suitable personalized contents according to customers personal interests in a seamless way, increase content sales and gain competitive advantage over other competitors. However the current implementations of recommende...
متن کاملLanguage-Based Enforcement of Privacy Policies
We develop a language-based approach for modeling and verifying aspects of privacy policies. Our approach relies on information-flow control. Concretely, we use the programming language Jif, an extension of Java with information-flow types. We address basic leaks of private information and also consider other aspects of privacy policies supported by the Platform for Privacy Preferences (P3P) an...
متن کامل