Home

Enforcing privacy as access control in a pervasive context

Aurélien Faravelon, Stéphanie Chollet, Christine Verdier and Agnès Front

Abstract :

Pervasive applications promotes a seamless integration of computer artifacts with our daily an business lives. However, it will be a failure if it does not ease the concerns it raises about privacy in terms of data collection. This paper understands privacy management as an access control problem and holds that privacy should be specified from a global point of view. On a technological plane, the paper focuses on service composition, a promising way to constitute applications from heterogenous entities, such as pieces of software code or devices. The investigation into a means to specify privacy at a high level of abstraction and a mechanism to support its execution leads to the proposition of a model-driven scheme which distinguishes a design level for privacy from its execution level. The design level provides a specification language for privacy which emphasizes its contextual features. This language is implemented at the execution level, generated through model transformations. The overall approach is validated on the example of a medical workflow.

KeyWords :

Service-Oriented Computing (SOC), Security, Control Access, Model-Driven Engineering.
Joomla SEF URLs by Artio

Connection