Extending HP Identity Management Solutions to Enforce Privacy Policies and

Casassa Mont, Marco ; Thyne, Robert ; Chan, Kwok ; Bramhall, Pete

HP Development Company

关键词: privacy;    IT governance;    privacy policy enforcement;    privacy-aware access control;    privacy obligations;    regulatory compliance;   

RP-ID  :  HPL-2005-110

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

This paper describes issues and requirements related to privacy management as an aspect of improved governance in enterprises. It focuses on the privacy enforcement aspect, in particular related to privacy- aware access control and enforcement of privacy obligations: this is still a green field and, at the same time, is a key aspect to be taken into account to ensure compliance both with regulations and an enterprise's IT governance objectives. We introduce our HP Labs work in these areas: core concepts are described along with our policy enforcement models and related technologies. Two prototypes have been built as a proof of concept to: (1) enforce privacy policies on personal data by extending HP Select Access; (2) manage and enforce privacy obligations on personal data, integrated with HP Select Identity. We describe their technical capabilities and our next steps.