Policies for Distributed Systems and Networks, IEEE International Workshop on (2005)
June 6, 2005 to June 8, 2005
Pranam Kolari , University of Maryland at Baltimore County
Li Ding , University of Maryland at Baltimore County
Shashidhara G. Anupam Joshi , University of Maryland at Baltimore County
Tim Finin , University of Maryland at Baltimore County
Lalana Kagal , Massachusetts Institute of Technology
The Platform for Privacy Preferences (P3P) is a W3C framework for web privacy management. It provides a standard vocabulary that websites can use to describe their privacy practices. The presence of website published P3P policies enable users to configure web browsers to allow, block or warn users during access and data exchange with web-sites. It?s a good idea that unfortunately is rarely used. We identify three primary reasons: (i) the languages available to describe user privacy preferences are not sufficiently expressive, (ii) P3P policies published by websites are not trusted by users and (iii) P3P framework does not provide a coherent view of available privacy protection mechanisms to the user. Towards addressing these issues; we present enhancements to the P3P framework. We use a more expressive policy language based on deontic concepts to describe users privacy-related policies, constraints and preferences. We introduce a new trust model for websites and describe its use in user privacy preferences. Finally, we present sample policies to demonstrate the relevance of our work and offer it as an effective starting point towards enhancing Web Privacy management.
L. Ding, T. Finin, S. G. Joshi, L. Kagal and P. Kolari, "Enhancing Web Privacy Protection through Declarative Policies," Policies for Distributed Systems and Networks, IEEE International Workshop on(POLICY), Stockholm, Sweden, 2005, pp. 57-66.