@inproceedings{5829352f3b974ce38fd406bc0d34b6ea,
title = "Purpose-based access control policies and conflicting analysis",
abstract = "This paper proposes a purpose-based framework for supporting privacy preserving access control policies and mechanisms. The mechanism enforces access policy to data containing personally identifiable information. The key component of the framework is purpose involved access control models (PAC) that provide full support for expressing highly complex privacy-related policies, taking into account features like purposes and conditions. A policy refers to an access right that a subject can have on an object, based on attribute predicates, obligation actions, and system conditions. Policy conflicting problems may arise when new access policies are generated. The structure of purpose involved access control policy is studied, and efficient conflict-checking algorithms are developed. Finally a discussion of our work in comparison with other access control and frameworks such as EPAL is presented.",
keywords = "Access Control, Conflicts, Privacy, Purpose",
author = "Hua Wang and Lili Sun and Vijay Varadharajan",
year = "2010",
doi = "10.1007/978-3-642-15257-3_20",
language = "English",
isbn = "3642152562",
volume = "330",
series = "IFIP Advances in Information and Communication Technology",
publisher = "IFIP",
pages = "217--228",
editor = "Kai Rannenberg and Vijay Varadharajan and Christian Weber",
booktitle = "Security and Privacy - Silver Linings in the Cloud - 25th IFIP TC 11 International InformationSecurity Conference, SEC 2010 Held as Part of WCC 2010, Proceedings",
note = "25th IFIP TC 11 International Information Security Conference, SEC 2010 ; Conference date: 20-09-2010 Through 23-09-2010",
}