A Declarative Framework for Specifying and Enforcing Purpose-Aware Policies

Abstract

Abstract. Purpose is crucial for privacy protection as it makes users confident that their personal data are processed as intended. Available proposals for the specification and enforcement of purpose-aware policies are unsatisfactory for their ambiguous semantics of purposes and/or lack of support to the run-time enforcement of policies. In this paper, we propose a declarative framework based on a first-order temporal logic that allows us to give a precise semantics to purpose-aware policies and to reuse algorithms for the design of a run-time monitor enforcing purpose-aware policies. We also show the complexity of the generation and use of the monitor which, to the best of our knowledge, is the first such a result in literature on purpose-aware policies.

Assisted Authoring, Analysis and Enforcement of Access Control Policies in the Cloud

“…This will also require the automatic synthesis of monitors to guarantee the satisfaction of purpose constraints. To this end, we envisage to integrate the approaches in, e.g., [5,2].…”

Purpose-Based Policy Enforcement in Actor-Based Systems

“…The main problem of these two approaches is that they do not consider that the purpose of an action may be determined by "its relationships with other interrelated actions" [6]. Action-based approaches consider that "an action is for a purpose if and only if the action is part of a plan for achieving that purpose" [6]. Tschants et.…”

“…al. [6] define semantics of purpose-aware policies based on a first-order temporal logic and design a runtime monitor for enforcing purpose-aware policies. They consider that the semantics of a purpose is its associated workflow and specify workflows using Linear-Time Temporal Logic (LTL).…”

“…This type of privacy policies is called purpose-based policies. Based on [5], [12], and [6], purpose-based policies can be categorized in two groups: data-centric and rule-centric policies. Data-centric policies focus on data and specify the purposes for which a data item can be used.…”

“…Most existing work on specification and enforcement of purpose, do not consider semantics for purposes. Some work like [11], [12] and [6] consider that "an action is for a purpose if and only if the action is part of a plan for achieving that purpose", and define the purpose semantics using formalisms based on planning. Nevertheless, to the best of our knowledge, there is no work that specifies and enforces purposes for actor-based systems.…”