Please use this identifier to cite or link to this item:

A Policy Framework for Subject-Driven Data Sharing

File Size Format  
paper0596.pdf 1.57 MB Adobe PDF View/Open

Item Summary

Title:A Policy Framework for Subject-Driven Data Sharing
Authors:Chowdhury, Mohammad Jabed Morshed
Colman, Alan
Han, Jun
Kabir, Muhammad Ashad
Keywords:Information Security and Privacy
Context-Aware Access, Privacy-Preserving Sharing, Re-sharing, Access Delegation, Subject-Centric Data Sharing
Date Issued:03 Jan 2018
Abstract:Organizations (e.g., hospitals, university etc.) are custodians of data on their clients and use this information to improve their service. Personal data of an individual therefore ends up hosted under the administration of different data custodians. Individuals (data subjects) may want to share their data with others for various reasons. However, existing data sharing mechanisms provided by the data custodians do not provide individuals enough flexibility to share their data, especially in a cross-domain (data custodian) environment. In this paper, we propose a data sharing policy language and related framework for a data subject to capture their fine-grained data sharing requirements. This proposed language allows the data subject to define data sharing policies that consider context conditions, privacy obligations and re-sharing restrictions. Furthermore, we have implemented a prototype to demonstrate how data subjects can define their data sharing policies and how the policies can be used and enforced at runtime.
Pages/Duration:10 pages
Rights:Attribution-NonCommercial-NoDerivatives 4.0 International
Appears in Collections: Information Security and Privacy

Please email if you need this content in ADA-compliant format.

This item is licensed under a Creative Commons License Creative Commons