Please use this identifier to cite or link to this item:
A Policy Framework for Subject-Driven Data Sharing
|Title:||A Policy Framework for Subject-Driven Data Sharing|
|Authors:||Chowdhury, Mohammad Jabed Morshed|
Kabir, Muhammad Ashad
|Keywords:||Information Security and Privacy|
Context-Aware Access, Privacy-Preserving Sharing, Re-sharing, Access Delegation, Subject-Centric Data Sharing
|Issue Date:||03 Jan 2018|
|Abstract:||Organizations (e.g., hospitals, university etc.) are custodians of data on their clients and use this information to improve their service. Personal data of an individual therefore ends up hosted under the administration of different data custodians. Individuals (data subjects) may want to share their data with others for various reasons. However, existing data sharing mechanisms provided by the data custodians do not provide individuals enough flexibility to share their data, especially in a cross-domain (data custodian) environment. In this paper, we propose a data sharing policy language and related framework for a data subject to capture their fine-grained data sharing requirements. This proposed language allows the data subject to define data sharing policies that consider context conditions, privacy obligations and re-sharing restrictions. Furthermore, we have implemented a prototype to demonstrate how data subjects can define their data sharing policies and how the policies can be used and enforced at runtime.|
|Rights:||Attribution-NonCommercial-NoDerivatives 4.0 International|
|Appears in Collections:||Information Security and Privacy|
Please contact email@example.com if you need this content in an alternative format.
Items in ScholarSpace are protected by copyright, with all rights reserved, unless otherwise indicated.