Development of privacy design patterns based on privacy principles and UML

摘要

Privacy is a major quality attribute of any software. Since personal data of users are collected, stored, processed, and transferred by the applications they use, they need to be assured that proper data protection is in place. Since privacy principles should be taken into account and incorporated into application design, this paper aims to promote privacy by design and presents a development of privacy design patterns. The patterns follow the privacy principles of the Organisation for Economic Co-operation and Development (OECD) and describe details of the privacy principles and how to apply them to the design and implementation of the applications. Software design models realizing the privacy principles are also proposed, using UML notations, so as to enable reuse of the design in privacy-aware applications.