Enforcing purpose of use via workflows

Jafari, Mohammad; Sheppard, Nicholas Paul

doi:10.1145/1655188.1655206

Cited by 19 publications

(19 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Most prior work on using formal methods for enforcing purpose restrictions has focused on when observable actions achieve a purpose [17][18][19][20][21][22][23][24]. That is, they define an action as being for a purpose if that action (possibly as part of a chain of actions) results in that purpose being achieved.…”

Section: Prior Workmentioning

confidence: 99%

Purpose Restrictions on Information Use

Tschantz

Datta

Wing

2013

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Privacy policies in sectors as diverse as Web services, finance and healthcare often place restrictions on the purposes for which a governed entity may use personal information. Thus, automated methods for enforcing privacy policies require a semantics of purpose restrictions to determine whether a governed agent used information for a purpose. We provide such a semantics using a formalism based on planning. We model planning using Partially Observable Markov Decision Processes (POMDPs), which supports an explicit model of information. We argue that information use is for a purpose if and only if the information is used while planning to optimize the satisfaction of that purpose under the POMDP model. We determine information use by simulating ignorance of the information prohibited by the purpose restriction, which we relate to noninterference. We use this semantics to develop a sound audit algorithm to automate the enforcement of purpose restrictions.

show abstract

Section: Prior Workmentioning

confidence: 99%

Purpose Restrictions on Information Use

Tschantz

Datta

Wing

2013

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…Most prior work on using formal methods for enforcing purpose restrictions has focused on when observable actions achieve a purpose [1,8,2,9,32,18,29,13]. That is, they define an action as being for a purpose if that action (possibly as part of a chain of actions) results in that purpose being achieved.…”

Section: Prior Workmentioning

confidence: 99%

Purpose Restrictions on Information Use

Tschantz¹,

Datta²,

Wing³

2013

View full text Add to dashboard Cite

Privacy policies in sectors as diverse as Web services, finance and healthcare often place restrictions on the purposes for which a governed entity may use personal information. Thus, automated methods for enforcing privacy policies require a semantics of purpose restrictions to determine whether a governed agent used information for a purpose. We provide such a semantics using a formalism based on planning. We model planning using Partially Observable Markov Decision Processes (POMDPs), which supports an explicit model of information. We argue that information use is for a purpose if and only if the information is used while planning to optimize the satisfaction of that purpose under the POMDP model. We determine information use by simulating ignorance of the information prohibited by the purpose restriction, which we relate to noninterference. We use this semantics to develop a sound audit algorithm to automate the enforcement of purpose restrictions.

show abstract

“…There are some proposals [9,10,6,15] that suggest associating purpose with the units of work in a system. They argue that tasks or workflows, can be used to identify the purpose of an action by looking at the higher-level unit of work in which it takes place.…”

Section: Related Workmentioning

confidence: 99%

“…The first method obviously cannot stop a malicious agent from claiming false purposes. The second method has been criticized to be inefficient in capturing purpose of an action since roles and purposes are not always aligned and members of the same organizational role may practice different purposes in their actions [15]. Therefore, identifying the purpose of an action, or verifying a claimed purpose remains an open question, partly because enough attention has not been paid to the link between actions and their purposes.…”

Section: Introductionmentioning

confidence: 99%

Towards defining semantic foundations for purpose-based privacy policies

Jafari

Fong

Barker

et al. 2011

Proceedings of the First ACM Conference on Data and Application Security and Privacy

Self Cite

View full text Add to dashboard Cite

We define a semantic model for purpose, based on which purpose-based privacy policies can be meaningfully expressed and enforced in a business system. The model is based on the intuition that the purpose of an action is determined by its situation among other inter-related actions. Actions and their relationships can be modeled in the form of an action graph which is based on the business processes in a system. Accordingly, a modal logic and the corresponding model checking algorithm are developed for formal expression of purpose-based policies and verifying whether a particular system complies with them. It is also shown through various examples, how various typical purpose-based policies as well as some new policy types can be expressed and checked using our model.

show abstract

Enforcing purpose of use via workflows

Cited by 19 publications

References 10 publications

Purpose Restrictions on Information Use

Purpose Restrictions on Information Use

Purpose Restrictions on Information Use

Towards defining semantic foundations for purpose-based privacy policies

Contact Info

Product

Resources

About