Disclosing personal and contextual information enables a widespread use of services in the internet in a comfortable working environment adapted to individual user needs and preferences. On the other hand, information disclosure raises serious privacy issues. In this paper, we propose a novel integrated approach for achieving a good balance between convenience and privacy. We integrate Privacy-Enhancing Identity Management (PIM) with extended role-based access control mechanisms (RBAC) in an extended concept and architecture. In combination, both mechanism enable a fine grained control of what private and contextual information is disclosed to whom in what situation. We have implemented a Privacy-Enhanced Adaptive Communicator application (PEAC) to validate our approach.
Index Terms:
PIM, partial identities, RBAC, context-awareness
Citation:
Elke Franz, Christin Groba, Thomas Springer, Mike Bergmann, "A Comprehensive Approach for Context-dependent Privacy Management," ares, pp.903-910, 2008 Third International Conference on Availability, Reliability and Security, 2008