Privacy and contextual integrity: framework and applications Export

@inproceedings{citeulike:1470246, abstract = {Contextual integrity is a conceptual framework for understanding privacy expectations and their implications developed in the literature on law, public policy, and political philosophy. We formalize some aspects of contextual integrity in a logical framework for expressing and reasoning about norms of transmission of personal information. In comparison with access control and privacy policy frameworks such as RBAC, EPAL, and P3P, these norms focus on who personal information is about, how it is transmitted, and past and future actions by both the subject and the users of the information. Norms can be positive or negative depending on whether they refer to actions that are allowed or disallowed. Our model is expressive enough to capture naturally many notions of privacy found in legislation, including those found in HIPAA, COPPA, and GLBA. A number of important problems regarding compliance with privacy norms, future requirements associated with specific actions, and relations between policies and legal standards reduce to standard decision procedures for temporal logic.}, author = {Barth, A. and Datta, A. and Mitchell, J. C. and Nissenbaum, H.}, citeulike-article-id = {1470246}, citeulike-linkout-0 = {http://dx.doi.org/10.1109/SP.2006.32}, citeulike-linkout-1 = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1624011}, doi = {10.1109/SP.2006.32}, journal = {Security and Privacy, 2006 IEEE Symposium on}, keywords = {applications, compliance, conceptual\_framework, conceptual\_integrity, decision\_procedures, framework, integrity, legislation, political\_philosophy, privacy, privacy\_policy, public\_policy}, pages = {15 pp.+}, posted-at = {2009-10-23 13:28:36}, priority = {2}, title = {Privacy and contextual integrity: framework and applications}, url = {http://dx.doi.org/10.1109/SP.2006.32}, year = {2006} }

TY - CONF ID - citeulike:1470246 L3 - citeulike-article-id:1470246 N2 - Contextual integrity is a conceptual framework for understanding privacy expectations and their implications developed in the literature on law, public policy, and political philosophy. We formalize some aspects of contextual integrity in a logical framework for expressing and reasoning about norms of transmission of personal information. In comparison with access control and privacy policy frameworks such as RBAC, EPAL, and P3P, these norms focus on who personal information is about, how it is transmitted, and past and future actions by both the subject and the users of the information. Norms can be positive or negative depending on whether they refer to actions that are allowed or disallowed. Our model is expressive enough to capture naturally many notions of privacy found in legislation, including those found in HIPAA, COPPA, and GLBA. A number of important problems regarding compliance with privacy norms, future requirements associated with specific actions, and relations between policies and legal standards reduce to standard decision procedures for temporal logic. JF - Security and Privacy, 2006 IEEE Symposium on TI - Privacy and contextual integrity: framework and applications SP - 15 pp. KW - applications KW - compliance KW - conceptual_framework KW - conceptual_integrity KW - decision_procedures KW - framework KW - integrity KW - legislation KW - political_philosophy KW - privacy KW - privacy_policy KW - public_policy AU - Barth, A AU - Datta, A AU - Mitchell, JC AU - Nissenbaum, H PY - 2006/// UR - http://dx.doi.org/10.1109/SP.2006.32 ER -