Using Policy-Based Management for Privacy-Enhancing Data Access and Usage Control in Grid Environments

摘要

Preventing the misuse of personally identifiable information and preserving user privacy are key issues in the management of IT services, especially when organizational borders are crossed. However, in Grid environments only few of the recent advantages in research areas such as privacy enhancing technologies and federated identity management have been adopted so far. In this article, we first present an analysis of the differences between Grid environments and previous models of inter-organizational collaboration. Based on requirements derived thereof, we demonstrate how existing policy-based privacy management architectures can be extended to provide Grid-specific functionality and integrated into existing infrastructures. Special emphasis is put on privacy policies which can be configured by users themselves, and distinguishing between the initial data access and the later data usage control phases. We also discuss the application of this approach to a XACML-based privacy management system.