A formal approach to access control and consent management

个人数据广泛分布在企业信息系统(IS)中，并在数千用户之间共享。保护个人数据的机密性和完整性在医疗、银行和政府项目等几个领域至关重要。访问控制负责控制谁有权访问IS中的什么内容以及何时访问。这项研究提案的目的是制定一个正式的框架，以控制对存储在信息系统中的个人数据的访问。该框架应确保根据组织的要求和与个人数据有关的个人要求访问个人数据。这一框架应解决以下问题。首先，它必须包括对用户、个人及其个人数据和访问控制规则进行建模的适当机制，这些规则共同形成了访问控制策略。其次，它必须包括用于指定和验证访问控制策略的属性的机制，以确保同时考虑个人需求和组织需求。第三，它必须包括可以将访问控制策略应用于访问请求的访问控制引擎。最后，该框架应该足够通用，以便在各种应用程序领域中使用；换句话说，我们需要从开发访问控制系统的临时方法过渡到基于访问控制组成的健全而强大的模型的系统方法。

Personal data are widely distributed in enterprise information systems (IS) and shared across thousands of users. Protecting the confidentiality and integrity of personal data is critical in several domains like health, banking and governmental programs. Access control is responsible for controlling who has access to what and when in an IS. The objective of this research proposal is to develop a formal framework for controlling access to personal data stored in information systems. This framework shall ensure that personal data is accessed according to the requirements of the organisation and the requirements of the individuals related to the personal data. This framework shall address the following issues. First, it must include a proper mechanism for modeling IS users, individuals and their personal data, and access control rules, which together form an access control policy. Second, it must include a mechanism for specifying and verifying properties of an access control policy, to ensure that both individual requirements and organisational requirements are taken into account. Third, it must include an access control engine that can apply an access control policy to an access request. Finally, this framework should be general enough to be used in a variety of application domains; in others words, we need to transition from an ad hoc way of developing access control systems to a systematic approach based on a sound and powerful model of what access control consist of.