Method and Apparatus for controlling the access of personal information between privacy domains

摘要

A method and an apparatus for controlling distribution of personal information among privacy domains are provided to enhance efficiency in distributing the personal information on the basis of a BPP(Bridge Privacy Policy) list via a BPC(Bridge Privacy Controller) without each PC(Privacy Controller)'s considering the information of the sites within all the domains. An apparatus for controlling distribution of personal information includes an AC(Attribute Consumer) list receiver(201), a BPP list generator(202) and a BPP list transmitter(203). The AC list receiver receives an AC list, which is a trust level list on the sites within a privacy domain, from each PC, which manages distribution of personal information among the sites within the privacy domain. The BPP list generator generates a BPP list for making each PC process a query on a request of the personal information from a specific site within other privacy domain by integrating the received AC list. The BPP list transmitter transmits the generated BPP list to each PC.