TC: Medium: Privacy and Declassification Policy Enforcement Framework

处理个人信息的信息系统必须遵守法律法规、公司隐私政策和旨在保护个人隐私的合同协议。完全依赖应用程序设计人员和开发人员来提供这样的保证是不现实的。需要能够识别个人数据处理中的错误并提供适当处理个人信息的正式保证的方法和工具。该项目正在开发一个软件开发框架，该框架使用新的基于语言的技术来确保软件执行隐私政策。隐私政策(基于法律和法规要求)在时序逻辑中正式规定，并确定在什么情况下可以共享信息(根据所涉个人的角色、以前的事件以及数据是否已被汇总等标准)和由于信息共享而产生的未来义务。该框架由策略分析工具、编程语言、验证隐私和解密策略是否执行的程序分析工具以及运行时环境组成。这些组件协同使用，产生分布式信息系统，可以适当地处理个人信息。该项目正在开发的框架将解决许多信息系统面临的问题。然而，该项目将侧重于医疗行业的需求，包括临床记录和临床试验。随着医疗实践向电子病历过渡，对高保证系统的需求变得越来越迫切。该项目将开发验证电子病历系统是否符合适用的隐私政策所需的能力。

Information systems that handle personal information must adhere tolegal regulations, corporate privacy policies, and contractualagreements designed to protect personal privacy. Relying exclusivelyon application designers and developers for such assurances isunrealistic. There is a need for methods and tools that can identifyerrors in the handing of personal data and provide formal assurancesthat personal information is handled appropriately.This project is developing a software development framework that usesnovel language-based techniques to ensure that software enforcesprivacy policies. Privacy policies (based on legal and regulatoryrequirements) are formally specified in temporal logic, and identifycircumstances under which information can be shared (based on criteriasuch as the roles of individuals involved, prior events, and whetherthe data has been aggregated) and future obligations that are incurredas a result of the information sharing. The framework consists ofpolicy analysis tools, a programming language, program analysis toolsthat verify both privacy and declassification policies are enforced,and a runtime environment. Used in concert, these components producedistributed information systems that verifiably handle personalinformation appropriately.The framework being developed by this project will address problemsfaced by many information systems. However, the project will focusespecially on the needs of the medical industry, both with respect topatient records and clinical trials. As medical practice transitionsto electronic medical records, the need for high-assurance systemsbecomes increasingly acute. This project will develop thecapabilities needed to verify that electronic medical recordssystems comply with applicable privacy policies.