Collaborative Research: A Comprehensive Policy-Driven Framework for Online Privacy Protection: Integrating IT, Human, Legal and Economic Perspectives

合作研究：综合政策驱动的在线隐私保护框架：整合 IT、人力、法律和经济视角

• 批准号: 0430274
• 负责人: Elisa Bertino
• 金额: $ 66.6万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-09-15 至 2007-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0430274&HistoricalAwards=false
• 关键词: Collaborative; Research; Comprehensive; Policy; Driven

Privacy is increasingly a major concern that prevents the exploitation of the Internet's full potential. Consumers are concerned about the trustworthiness of the websites to which they entrust their sensitive information. Although significant industry efforts are seeking to better protect sensitive information online, existing solutions are still fragmented and far from satisfactory. Specifically, existing languages for specifying privacy policies lack a formal and unambiguous semantics, are limited in expressive power and lack enforcement as well as auditing support. Moreover, existing privacy management tools aimed at increasing end-users' control over their privacy are limited in capability or difficult to use.This project seeks to provide a comprehensive framework for protecting online privacy, covering the entire privacy policy life cycle. This cycle includes enterprise policy creation, enforcement, analysis and auditing, as well as end user agent presentation and privacy policy processing. The project integrates privacy-relevant human, legal and economic perspectives in the proposed framework. This project will develop an expressive, semantics-based formal language for specifying privacy policies, an access control and auditing language for enforcing privacy policies in applications, as well as theory and tools for verifying privacy policies. Additionally, experiments and surveys will be conducted to better understand the axes of users' privacy concerns and protection objectives. Results from this empirical work will be used to develop an effective paradigm for specifying privacy preferences and methods to present privacy policies to end users in an accurate and accessible way.

隐私日益成为阻碍互联网充分发挥潜力的主要问题。消费者担心他们托管敏感信息的网站的可信度。尽管业界正在努力寻求更好地保护在线敏感信息，但现有的解决方案仍然支离破碎且远不能令人满意。具体来说，现有的用于指定隐私策略的语言缺乏正式且明确的语义，表达能力有限，并且缺乏执行和审计支持。此外，现有旨在增强最终用户对其隐私的控制的隐私管理工具功能有限或难以使用。该项目旨在提供一个全面的框架来保护在线隐私，涵盖整个隐私政策生命周期。该周期包括企业策略创建、执行、分析和审核，以及最终用户代理呈现和隐私策略处理。该项目在提议的框架中整合了与隐私相关的人类、法律和经济观点。该项目将开发一种用于指定隐私策略的富有表现力的、基于语义的形式语言，一种用于在应用程序中执行隐私策略的访问控制和审计语言，以及用于验证隐私策略的理论和工具。 此外，还将进行实验和调查，以更好地了解用户的隐私关注点和保护目标。 这项实证工作的结果将用于开发一种有效的范式，用于指定隐私偏好和方法，以准确且易于理解的方式向最终用户呈现隐私政策。