Policy-Based Management and Sharing of Sensitive Information Among Government Agencies

Ager, T.; Johnson, Cathy; Kiernan, Jerry

doi:10.1109/milcom.2006.302517

Cited by 14 publications

(6 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Tryg Ager et al [31] intended a set of policy-based technologies to easiness increased information sharing between government agencies without negotiating information security or individual privacy. The approach comprises: (1) fine-grained access controls that support deny and filter semantics for complex policy condition satisfaction; (2) a sticky policy ability that assists consolidation of information from multiple sources subject to the source's original disclosure policies of each; (3) a curation organization that permit agencies to apply and contrive item-level security classifications and disclosure policies; (4) an auditing system that accounts for the curation history of each information item; and (5) a provenance auditing method that traces information derivations over time to offer support in evaluating information quality.…”

Section: Review Of Previous Researchmentioning

confidence: 99%

Interoperability, Trust Based Information Sharing Protocol and Security: Digital Government Key Issues

Headayetullah¹,

Pradhan²

2010

IJCSIT

View full text Add to dashboard Cite

show abstract

Section: Review Of Previous Researchmentioning

confidence: 99%

Interoperability, Trust Based Information Sharing Protocol and Security: Digital Government Key Issues

Headayetullah¹,

Pradhan²

2010

IJCSIT

View full text Add to dashboard Cite

show abstract

“…Therefore, the privacy protection model proposed here governs an interface to data under the jurisdiction of a government body, irrespective of whether it is in the public record or not. We build on those approaches proposed in [4], concerning policy-based fine-grained access control for protecting multi-level classified information. Like the platform for privacy protection, P3P [3], our model provides a mechanism for policies to be specified and exchanged.…”

Section: Technological Safeguards For Privacy Protecting Mashupsmentioning

confidence: 99%

Privacy protection in government mashups

Warner

Chun

2009

View full text Add to dashboard Cite

The Web 2.0 technologies allow dynamic content creation using syndications or mashups, extracted from diverse data sources, including government enterprise data. As a primary source of citizen data, the US government has the obligation not only to make public data available for citizen access as stated in the Freedom of Information Act, but also to protect the privacy of individual citizen's records as stated in the Privacy Act. In a mashup, a third party mashup Web application provider requests the individual's data from the government agencies through Web services. Since the data is public data and not necessarily provided through electronic interactions, individual citizens may not be able to express fine-grained privacy policies on how data may be used. In addition, the government agency's privacy policy is very coarse grained, and the relative sensitivity of individual information is not considered. We discuss the opportunities and issues associated with the programmable web and mashups, provide a Privacy Protection Model for Mashup Applications, using a mashup related multi-dimensional privacy protection space and present policy recommendations to complement the technological solutions. The model and recommendations include deployment of a personal privacy policy network, a distributed system over which citizens can publish their individual privacy policies. These policies are accessible by all web service providers to be consulted in real time by data providers including government agencies for the purposes of automated privacy protection reasoning concerning data release.

show abstract

“…Tryg Ager et al [31] designed a set of policy-based technologies to ease increased information sharing between government agencies without negotiating information security or individual privacy. The approach includes: (1) fine-grained access controls that support deny and filter semantics for complex policy condition satisfaction; (2) a sticky policy ability that facilitates consolidation of information from multiple sources subject to the source's original disclosure policies of each; (3) a curation organization that permit agencies to apply and contrive item-level security classifications and disclosure policies; (4) an auditing system that accounts for the curation history of each information item; and (5) a provenance auditing method that traces information derivations over time to offer support in evaluating information quality.…”

Section: Review Of Prior Researchesmentioning

confidence: 99%

Secure Information Sharing Between Government Intelligence Agencies: An Innovative Protocol Based on Trust

Headayetullah¹,

Pradhan²

2009

IJET

View full text Add to dashboard Cite

Information sharing and integration are being looked upon as the most increasingly adopted methodologies by governments around the world, for solving problems in a broad variety of programs and policy areas. Issues of universal concern such as disease detection and control, terrorism, immigration and border control, illicit drug trafficking, and more demand information sharing, coordination and collaboration amid government agencies within a country and across national boundaries. Several daunting challenges exist towards the development of a competent information sharing protocol. The principal challenge would be the development of a protocol capable of sharing secure information between different government and non-government agencies, with the purpose of streamlining government services. In this paper, we devise an innovative and proficient trust-based information sharing protocol for secure exchange of confidential and top secret information amongst government intelligence agencies across national boundaries using public key cryptography. The proposed protocol makes use of 1) MD5 Algorithm for Data Integrity 2) Public key cryptosystem for Confidentiality and Authentication and 3) A unique and complex mapping function for Agency Identification. Furthermore, the proposed protocol facilitates privacy preserving information sharing with probable restrictions based on the trust level maintained between the communicating agencies. The trust protocol devised ensures secure and stream-lined information sharing among government intelligence agencies to shun ominous activities.

show abstract

Policy-Based Management and Sharing of Sensitive Information Among Government Agencies

Abstract: We propose a set of policy-based

Cited by 14 publications

References 13 publications

Interoperability, Trust Based Information Sharing Protocol and Security: Digital Government Key Issues

Interoperability, Trust Based Information Sharing Protocol and Security: Digital Government Key Issues

Privacy protection in government mashups

Secure Information Sharing Between Government Intelligence Agencies: An Innovative Protocol Based on Trust

Contact Info

Product

Resources

About