On Parametric Obligation Policies: Enabling Privacy- aware Information Lifecycle Management in Enterprises

Casassa Mont, Marco ; Beato, Filipe

HP Development Company

关键词: identity management;    privacy;    information lifecycle management;    obligation policies;    obligation management system;    scalability;   

RP-ID  :  HPL-2007-7

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

Enterprises that collect and process personal data must deal with related privacy management issues. It is not just a matter of privacy-aware access control: privacy obligation policies, dictating duties and expectations on how personal data has to be handled, must be considered too. The management of obligation policies is a promising area (affecting the lifecycle management of personal data) but it is still underestimated. Enterprises require solutions that enable automation and leverage their current identity management solutions. HP Labs have been working on this topic in the last few years, also in the context of the EU PRIME project. In this paper we present our recent work on parametric obligation policies and a related obligation management framework to deal with a scalable management of these obligation policies on large amounts of data, stored in distributed data repositories. 10 Pages