A Formal Privacy System and Its Application to Location Based Services

13 years 10 months ago

Download seclab.uiuc.edu

There are a variety of well-known models for access control developed for purposes like formally modeling the access rights on ﬁles, databases, and web resources. However, the existing models provide an inadequate representation of a number of concepts that are important when modeling privacy rights in distributed systems. We present an analog of the access control matrix designed to model such concepts. Our formalism, which we call a privacy system, empashizes the management of data and actions that aﬀect the privacy of subjects. We motivate privacy systems, describe them mathematically, and illustrate their value in an architecture based on Personal Digital Rights Management (PDRM), which uses DRM concepts as a foundation for the speciﬁcation and negotiation of privacy rights. This illustration is carried out throuh a case study of a privacy-respecting system for location based services. Our prototype, which we call AdLoc, manages advertising interupts on PDAs based on their lo...

Carl A. Gunter, Michael J. May, Stuart G. Stubbleb

Real-time Traffic