Policy Provisioning and Its Access Control Beyond Administrative and Collaborative Domains
Journal of Information Processing, 2012/1, Vol. 20, No. 1. pp.196-206
セキュリティ・プライバシー (Security & Privacy)
- A policy provisioning framework is described that supports management of the lifecycle of personal information and its data-handling policies distributed beyond security domains. A model for creating data-handling policies reflecting the intentions of its system administrator and the privacy preferences of the data owner is explained. Also, algorithms for systematically propagating and integrating data-handling policies from system entities in different administrative domains are presented. This framework enables data-handling policies to be properly deployed and enforced in a way that enhances security and privacy.