A Policy Based Infrastructure for Social Data Access with Privacy Guarantees

Authors: Palanivel Andiappan Kodeswaran, and Evelyne Viegas

Book Title: Proceedings of the IEEE International Symposium on Policies for Distributed Systems and Networks

Date: July 21, 2010

Abstract: In this paper, we present a policy based infrastructure for social data access with the goal of enabling scientific research, while preservingprivacy. We describe motivating application scenarios that could be enabled with the growing number of user datasets such as social networks, medical datasets etc. These datasets contain sensitive user information and sufficient caution must be exercised while sharing them with third parties to prevent privacy leaks. One of the goals of our framework is to allow users to control how their data is used, while at the same time enable researchers to use the aggregate data for scientific research. We extend existing access control languages to explicitly model user intent in data sharing as well as supporting additional access modes viz. Complete Access, Abstract Access and Statistical Access that go beyond the traditional allow/deny binary semantics of access control. We then describe our policy infrastructure and show how it can be used to enable the above scenarios while still guaranteeing individual privacy. We then present our initial implementation of the framework extending the SecPAL authorization language to account for new roles and operations.

Type: InProceedings

Publisher: IEEE Computer Society

Tags: policy, social media, privacy

Google Scholar: e7B_CKDiA8IJ

Number of Google Scholar citations: 6 [show citations]

Number of downloads: 952

Available for download as

size: 377335 bytes	size: 566272 bytes	size: 285128 bytes	size: 797184 bytes

Bookmark at: Digg | Del.icio.us | Connotea | CiteULike