to Enable Privacy-aware SOA L. Bussard European Microsoft - - PowerPoint PPT Presentation
Data Privacy Management (DPM09) September 24, 2009 Obligation Language and Framework to Enable Privacy-aware SOA L. Bussard European Microsoft Innovation Center (joint work with M. Ali and U. Pinsdorf) A research project funded by the
1
A research project funded by the European Commission’s 7th Framework Programme
2
Specifying Obligations Enforcing Obligations
Privacy policies and preferences Anonymous credentials User experience
3
Variety of technologies:
Multi-hop data sharing Multiple trust domains Data from multiple users
Dynamic discovery and
Persons may consume
4
PII ? Policy Pref.
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’
2) Pref.
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
5
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’ 2) Pref.
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
Boolean
6
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’ 2) Pref.
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
PRIME-obligations
7
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’ 2) Pref.
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
PRIME-obligations
8
Rights
Data usage (purpose, etc.) Data sharing (Access Control, etc.)
Obligations
Triggers + Actions Examples: Retention, Notification, Log, etc.
Similar language for policies, preferences, and sticky
9
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’ 2) Pref .
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
Service User
10
Privacy Preferences Rights Obligations Privacy Policy Rights Obligations Sticky Policy Rights Obligations Policy Matching Engine 1 1 2 3
Legacy system Legacy system
4 4 Policy Enforcement Engine
PII + SP’ 4) PII + SP 1) Policy User
(data subject)
Service
(data controller)
Policy’ 2) Pref.
3) Can I share? (Matching) 5) store 6) Can I use for… ? 8) Can I share? 7) Obligations
Third Party
(downstream data controller)
11
Privacy Preferences Rights Obligations Privacy Policy Rights Obligations Sticky Policy Rights Obligations Policy Matching Engine 1 1 2 3
Extern al syste m Extern al syste m
4 4 Policy Enforcement Engine Privacy Pref. Sticky Policy Rights Obligations Privacy Policy of third party Rights Obligations New Sticky Policy Rights Obligations Policy Matching Engine 5 5 6 7
Externa l system Externa l system
8 8 Policy Enforcement Engine
Service User
12
Privacy Preferences Rights Obligations Privacy Policy Rights Obligations Sticky Policy Rights Obligations Policy Matching Engine 1 1 2 3
Legacy system Legacy system
4 4 Policy Enforcement Engine
X Says X will DELETE U’s Data within 6 Months
13
Independence from policy language
Independence from data storage
Independence from communication protocols
Support for common obligations
Support for domain specific obligations
Support for abstraction of actions
Support for preventive obligations
Support for abstraction of triggers
Support for distributed deployment
Support for different trust models
Transparency of data handling
14
15 Subject Action Object (Parameter
Trigger/ Condition Policy Issuer
The entity liable to fulfill obligation (i.e. the subject of the obligation not the data subject)
The activity (or sequence of activities) executed to fulfill obligation
Constraints on the obligation rule
Inward event to trigger execution of obligation rule
Outward notification events
Conditional vs. Mandatory Repeating vs. Non-Repeating
Proactive vs. Preventive Observable vs. Non-observable
Collective vs. Individual Self Obligation vs. Third Party Obligations
16
EE
17
Event Engine Obligation Engine
Actions Systems Plug-in Plug-in Trigger Plug-in System Plug-in Plug-in Plug-in Plug-in Plug-in
Policy Repository Legacy Systems (e.g. DataBase) Scheduler Obligation Framework Policy Extractor
Protocols Plug-in Plug-in
Obligation Parser Obligation PII event action PII, Obligation Obligation Schedule Register
18
Actions Systems Notify SQL- Server Delete Log
…
Exchan ge
…
Trigger Systems time SQL- Server read delete … Sched uler
… Scheduler Legacy Systems
19
Actions Systems Notify SQL- Server Delete Log
…
Exchan ge
… Legacy Systems
Trigger Systems time SQL- Server read delete … Sched uler
… Scheduler
20
Actions Systems Notify SQL- Server Delete Log
…
Exchan ge
… Legacy Systems
Triggers Systems time SQL- Server read delete … Sched uler
… Scheduler Event Engine Obligation Engine Policy Repository PII Read Send e-mail
Definition of Triggers Definition of Actions
21
Semantics of actions and triggers Policy is-less-permissive-than Preference ?
XACML-based data handling
SecPAL for Privacy
22
23
http://research.microsoft.com/en-us/people/lbussard/