A formal approach to access control and consent management

个人数据在企业信息系统（IS）中广泛分布，并在成千上万的用户之间共享。保护个人数据的机密性和完整性在健康、银行和政府项目等多个领域至关重要。访问控制负责控制谁可以访问is中的哪些内容以及何时访问。这项研究计划的目的是发展一个正式的框架，以控制访问存储在信息系统中的个人数据。该框架应确保根据组织的要求和与个人数据相关的个人的要求访问个人数据。该框架应解决以下问题。首先，它必须包括对IS用户、个人及其个人数据和访问控制规则进行建模的适当机制，这些机制共同构成访问控制策略。其次，它必须包含一种机制，用于指定和验证访问控制策略的属性，以确保个人需求和组织需求都被考虑在内。第三，它必须包含一个访问控制引擎，该引擎可以对访问请求应用访问控制策略。最后，这个框架应该足够通用，可以在各种应用领域中使用；换句话说，我们需要从开发访问控制系统的临时方式过渡到基于访问控制组成的健全和强大模型的系统方法。

Personal data are widely distributed in enterprise information systems (IS) and shared across thousands of users. Protecting the confidentiality and integrity of personal data is critical in several domains like health, banking and governmental programs. Access control is responsible for controlling who has access to what and when in an IS. The objective of this research proposal is to develop a formal framework for controlling access to personal data stored in information systems. This framework shall ensure that personal data is accessed according to the requirements of the organisation and the requirements of the individuals related to the personal data. This framework shall address the following issues. First, it must include a proper mechanism for modeling IS users, individuals and their personal data, and access control rules, which together form an access control policy. Second, it must include a mechanism for specifying and verifying properties of an access control policy, to ensure that both individual requirements and organisational requirements are taken into account. Third, it must include an access control engine that can apply an access control policy to an access request. Finally, this framework should be general enough to be used in a variety of application domains; in others words, we need to transition from an ad hoc way of developing access control systems to a systematic approach based on a sound and powerful model of what access control consist of.