An Ontology-Based Approach for Managing and Maintaining Privacy in Information Systems

Designing Data Protection Safeguards Ethically

“…In a few years, nevertheless, this gap has begun to be filled by work on privacy [31], universal usability [32], informed consent [33], crime control [34,35], social justice [36], self-enforcement technologies [37], and more. Not surprisingly, today there is a variety of design approaches to data protection [6][7][8][9][10][11][12][13][14][15][16][17]: design may shape places or products, spaces or processes, to decrease the impact of harm-generating conducts or, alternatively, to encourage the change of social behavior.…”

“…After all, work in legal ontologies allows us to quantify the growing amount of personal data processed in compliance with legal frameworks: This is what occurs with research in the management of information systems [8,41], support of privacy preservation in location-based services [9], or middleware architectures for data protection [10], each of which aims at integrating smaller parts and sub-solutions of the design project. Interestingly, there are cases where the conceptualization of classes, relations, properties, and instances pertaining to a given problem domain, does not seem particularly complex, e.g., the design of information systems for hospitals to ensure that patient names are kept separated from data on medical treatments or health status.…”

“…In the first scenario, design can induce the change of people"s behavior via friendly interfaces [8,41], location-based services [9], and the like. An interesting case is offered by the free-riding phenomenon of P2P networks, where most peers tend to use these systems to find information and download their favorite files without contributing to the performance of the system [59].…”

“…There has been seminal work on the ethics of design [2][3][4], and privacy [5]. Recently, research has focused on data protection issues involved in the design of ICT by means of value-sensitive designs [6,7], legal ontologies [8][9][10], P3P [11][12][13] and PeCAM platforms [14,15], down to the topology of complex social networks [16,17]. In addition, the idea of incorporating data protection safeguards in ICT was further discussed in "Privacy by Design.…”

An Architecture for Verification of Access Control Policies with Multi Agent System Ontologies

“…Our approach is a solution for multi-agent systems which uses [1] and [9]. Agent domain ontology and agent security ontology usage for access control has been combined and used with a general platform-independent XACML policy set.…”