Privacy Protection Data Access Control

Min-Yu Chen ； Chou-Chen Yang ； Min-Shiang Hwang

《International Journal of Network Security》 15卷6期 (2013/11) Pp. 411-419

https://doi.org/10.6633/IJNS.201311.15(6).01

並列摘要

For some purposes, such as benefits, requirement-fitted services and management, enterprises regularly ask customers, employees, and business partner to provide relevance data including sensitive personal information. However, transparent information bring the infringement of privacy and threats of living security to the data providers. Recently, enterprises have suffered from the loss of potential customers and benefits because of the rise of privacy protection consciousness. Therefore, this article researches in the solutions of data privacy protection in enterprises, and classifies into three categories, ”Role-based”, ”Purpose-based”, and ”Extension”. Furthermore, we define three criterions which should be achieved when an enterprise wants to implement a data access system with privacy protection mechanism. We hope it is helpful for enterprises to strengthen privacy protection depending on their own characteristics and requirements.

並列關鍵字

Access control ； privacy protection ； purpose-based access control ； role-based access control