Searching for Privacy: Design and Implementation of a P3P-Enabled Search Engine

Searching for Privacy: Design and Implementation of a P3P-Enabled Search Engine
复制标题

搜索隐私:P3P 搜索引擎的设计与实现

DOI:
10.1007/11423409_20
复制
发表时间:
2004
期刊:
IEEE Security & Privacy Magazine
影响因子:
--
通讯作者:
P. Mcdaniel
P. Mcdaniel
中科院分区:
--
文献类型:
--
作者:
S. Byers;L. Cranor;David P. Kormann;P. Mcdaniel

文献摘要

被引文献

相似文献

尽管在线隐私政策的数量正在增加,但互联网用户仍然很难理解它们,更不用说跨网站比较政策或识别具有最佳隐私实践的网站了。万维网联盟(W3C)开发了隐私首选项平台(P3P 1.0)规范,为隐私策略提供了一种计算机可读的标准格式。该标准使web浏览器和其他用户代理能够代表其用户解释隐私政策。本文介绍了我们的基于p2p的Privacy Bird搜索引擎原型。此搜索服务的用户可以看到查询结果中包含的网站的隐私政策的可视化指示器。我们的系统充当一般搜索引擎的前端,根据用户的隐私偏好设置评估与搜索结果相关的P3P策略。为了提高系统性能,我们缓存了数千个最受欢迎的站点以及在以前的搜索结果中返回的站点的未过期的P3P策略信息(包括关于P3P策略缺失的信息)。我们将讨论系统架构及其实现,并考虑将原型发展为功能齐全且高效的服务所必需的工作。
Although the number of online privacy policies is increasing, it remains difficult for Internet users to understand them, let alone to compare policies across sites or identify sites with the best privacy practices. The World Wide Web Consortium (W3C) developed the Platform for Privacy Preferences (P3P 1.0) specification to provide a standard computer-readable format for privacy policies. This standard enables web browsers and other user agents to interpret privacy policies on behalf of their users. This paper introduces our prototype P3P-enabled Privacy Bird Search engine. Users of this search service are given visual indicators of the privacy policies at sites included in query results. Our system acts as a front end to a general search engine by evaluating the P3P policies associated with search results against a user's privacy preference settings. To improve system performance we cache unexpired P3P policy information (including information about the absence of P3P policies) for thousands of the most popular sites as well as for sites that have been returned in previous search results. We discuss the system architecture and its implementation, and consider the work necessary to evolve our prototype into a fully functional and efficient service.