ID관리시스템의 접근통제기반 프라이버시 보안모델 = An Access Control Based Privacy Protection Model in ID Management System

다국어 초록 (Multilingual Abstract)

The vulnerability of privacy in the Identity Management System (IMS) is the most pressing concern of ordinary users. Uncertainty about privacy keeps many users away from utilization of IMS. Therefore, this paper proposes an access-control oriented privacy model for IMS. The proposed model protects privacy using access control techniques with privacy policies in a single circle of trust. We address characteristics of the components of for the proposed model and describe access control procedures. After that, we show the architecture of privacy enforcement and XML-based schema for privacy policies.

참고문헌 (Reference)

1 Computer Science and Telecommunications Board (CSTB), "Who Goes There?: Authentication Through the Lens of Privacy"

2 Lorrie Faith Cranor, "Web Privacy with P3P" AT&T 2002

3 J. Park, "The UCON(Usage Control Model)" 2004

4 Samuel D. Warren, "The Right to Privacy" 1980

5 "Sourceid: Open Source Federated Identity Management"

6 RAPID Project, "RAPID: Roadmap for Advanced Research in Privacy and Identity Management"

7 R. Agrawal, "Privacy-preserving data mining" 2000

8 Abdelmounaam Rezgui, "Privacy on the Web: Facts, Challenges, and Solutions" 1 (1): 2003-, 2003

9 Liberty Alliance Project, "Privacy and Security Best Practices" 2003

10 Magnuson, G, "Privacy and Identity Management Survey" 2004

11 P. Ashley, "Privacy Policies and Privacy Authorization" 2002

12 RIME Project, "PRIME: Privacy and Identity Management for Europe Date of preparation"

13 W3C, "P3P1.0: The Platform for Privacy Preferences 1.0 Specification"

14 Microsoft, "Microsoft .NET Passport"

15 Cantor, "Liberty ID-FF Protocols and Schema Specification, Version 1.2 Liberty Alliance Project" 2004

16 Liberty Alliance Project, "Liberty Alliance: Introduction to the Liberty Alliance Identity Architecture" 2003

17 PRIME Project, "Identity Management Systems (IMS): Identification and Comparison Study"

18 IBM, "IBM Policy Editor"

19 Paul Ashley, Satoshi Hada, Günter Karjoth, Calvin Powers, Matthias Schunter, "Enterprise Privacy Authorization Language (EPAL 1.2)"

20 G. Karjoth, M, "Amending P3P for Clearer Privacy Promises" 2003

21 AT&T, "AT&T Privacy Bird"