Contributions to Standardisation

Hedbom, Hans; Schallaböck, Jan; Wenning, Rigo; Hansen, Marit

doi:10.1007/978-3-642-20317-6_25

Cited by 3 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since 2009, an extension of the classic triad by three privacy-specific protection goals is being discussed. At first having started among a few researchers and the German data protection commissioners' community [3][4], then with lawmakers which resulted in some adoptions of the terms in national or regional data protection law [5], and meanwhile on the international level as a contribution to ISO's privacy reference architecture [6].…”

Section: Protection Goals For Information Security and Privacymentioning

confidence: 99%

“…The privacy protection goals unlinkability, transparency and intervenability are defined as follows [6]:…”

Section: Protection Goals For Information Security and Privacymentioning

confidence: 99%

“…In addition, Privacy-ABCs can reveal the holder's identity in predefined cases. Pseudonymous authentication tokens 6 should be directly derivable from the eID to avoid the need of contacting a central party. Revealing the holder's identity should be possible without the necessity of giving the holder's personal data in clear text to a third party.…”

Section: Use Cases For Identification Anonymous or Pseudonymous Authmentioning

confidence: 99%

“…All these properties show the need for a privacy-respecting design of eID systems right from the planning phase to provide comprehensive support to individuals. In this text we assess relevant parts of eID concepts and implementations by specifically applying the protection goals "unlinkability", "transparency" and "intervenability" that have recently been proposed on the national [3][4] [5] and international level ( [6], p. 482 et seq.) to strengthen the privacy perspective by supplementing the classic information security protection goals "confidentiality", "integrity" and "availability".…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Privacy Protection Goals and Their Implications for eID Systems

Zwingelberg

Hansen

2012

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

Abstract. Protection goals such as confidentiality, integrity and availability have proved to be successful in evaluating information security risks and choosing appropriate safeguards. The recently developed privacy-specific protection goals unlinkability, transparency and intervenability complement these classic goals and thereby provide cornerstones to define requirements concerning information security as well as privacy and to assess solutions. This text focuses on the application of the three new protection goals to eID systems such as government-issued electronic identity cards in different settings.

show abstract

Section: Protection Goals For Information Security and Privacymentioning

confidence: 99%

“…The privacy protection goals unlinkability, transparency and intervenability are defined as follows [6]:…”

Section: Protection Goals For Information Security and Privacymentioning

confidence: 99%

Section: Use Cases For Identification Anonymous or Pseudonymous Authmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Privacy Protection Goals and Their Implications for eID Systems

Zwingelberg

Hansen

2012

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

show abstract

“…The privacy protection goals are proposed for standardization of the ISO Privacy Reference Architecture [33] and have become part of the revised Data Protection Act Schleswig-Holstein [34].…”

Section: Working With Privacy Protection Goalsmentioning

confidence: 99%

Top 10 Mistakes in System Design from a Privacy Perspective and Privacy Protection Goals

Hansen

2012

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

Privacy requirements are often not well considered in system design. The objective of this paper is to help interested system designers in three ways: First, it is discussed how "privacy" should be understood when designing systems that take into account the protection of individuals' rights and their private spheres. Here specifically the concept of linkage control as an essence of privacy is introduced. Second, the paper presents a list of ten issues in system design collected during the daily work of a Data Protection Authority. Some of the mistakes are based on today's design of data processing systems; some belong to typical attitudes or mindsets of various disciplines dealing with system design (technology, law, economics and others). Third, it is explained how working with protection goals can improve system design: In addition to the well-known information security protection goals, namely confidentiality, integrity and availability, three complementing privacy protection goals -unlinkability, transparency and intervenability -are proposed.

show abstract