Hierarchical hippocratic databases with minimal disclosure for virtual organizations

Abstract The protection of customer privacy is a fundamental issue in today's corporate marketing strategies. Not surprisingly, many research efforts have proposed new privacy-aware technologies. Among them, Hippocratic databases offer mechanisms for enforcing privacy rules in database systems for inter-organizational business processes (also known as virtual organizations). This paper extends these mechanisms to allow for hierarchical purposes, distributed authorizations and minimal disclosure supporting the business processes of virtual organizations that want to offer their clients a number of ways to fulfill a service. Specifically, we use a goal-oriented approach to analyze privacy policies of the enterprises involved in a business process. Based on the purpose hierarchy derived through a goal refinement process, we provide algorithms for determining the minimum set of authorizations needed to achieve a service. This allows us to automatically derive access control policies f...

• Type: Conference
• Year: 2006
• Where: VLDB
• Authors: Fabio Massacci, John Mylopoulos, Nicola Zannone
• Keywords: Database, Inter-organizational Business Process, Keywords Privacy Protection, Privacy Policies, VLDB 2006