A Cloud Accountability Policy Representation Framework
A Cloud Accountability Policy Representation Framework
复制标题
云问责策略表示框架
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
K. Bernsmed
中科院分区：
文献类型：
--
作者：
Walid Benghabrit;Hervé Grall;J. Royer;M. Sellami;Monir Azraoui;K. Elkhiyaoui;Melek Önen;Anderson Santana de Oliveira;K. Bernsmed
如今，我们正在见证云服务的民主化。因此，越来越多的终端用户(个人和企业)正在使用这些服务来实现其电子交易(购物、行政程序、B2B交易等)。在这种情况下，个人数据通常在几个实体之间流动，最终用户需要(I)了解个人数据的管理、处理、存储和保留，以及(Ii)具有必要的手段，以追究服务提供商对其数据使用的责任。事实上，处理个人数据会引发几个隐私和责任问题，在推广使用云服务之前必须考虑这些问题。在本文中，我们提出了一个表示云责任策略的框架。这些政策为最终用户提供了一个清晰的视角，让他们了解与之互动的实体所主张的隐私和问责义务，以及代表他们的喜好的手段。这一框架带有两种新颖的问责政策语言。用于以人类可读的方式表示偏好/义务的抽象描述。以及一个具体的政策映射到具体的可执行的政策。我们通过具体的用例场景来激励我们的解决方案。
Nowadays we are witnessing the democratization of cloud services. As a result, more and more end-users (individuals and businesses) are using these services for achieving their electronic transactions (shopping, administrative procedures, B2B transactions, etc.). In such scenarios, personal data is generally flowed between several entities and end-users need (i) to be aware of the management, processing, storage and retention of personal data, and (ii) to have necessary means to hold service providers accountable for the usage of their data. In fact, dealing with personal data raises several privacy and accountability issues that must be considered before to promote the use of cloud services. In this paper, we propose a framework for the representation of cloud accountability policies. Such policies offer to end-users a clear view of the privacy and accountability obligations asserted by the entities they interact with, as well as means to represent their preferences. This framework comes with two novel accountability policy languages. An abstract one devoted for the representation of preferences/obligations in an human readable fashion. And a concrete one for the mapping to concrete enforceable policies. We motivate our solution with concrete use case scenarios.