TC: Medium: Privacy and Declassification Policy Enforcement Framework

处理个人信息的信息系统必须遵守旨在保护个人隐私的法律法规、公司隐私政策和合同协议。完全依靠应用程序设计人员和开发人员来保证这种保证是不现实的。需要一些方法和工具来识别个人数据处理中的错误，并提供个人信息得到适当处理的正式保证。这个项目正在开发一个软件开发框架，它使用新颖的基于语言的技术来确保软件执行隐私政策。隐私政策（基于法律和监管要求）在时间逻辑中正式指定，并确定信息可以共享的情况（基于诸如所涉及的个人角色，先前事件以及数据是否已汇总等标准）以及由于信息共享而产生的未来义务。该框架由策略分析工具、编程语言、验证隐私和解密策略是否被执行的程序分析工具以及运行时环境组成。协同使用，这些组件产生分布式信息系统，可验证地适当处理个人信息。这个项目正在开发的框架将解决许多信息系统面临的问题。然而，该项目将特别关注医疗行业的需求，包括患者记录和临床试验。随着医疗实践向电子医疗记录的过渡，对高保障系统的需求变得越来越迫切。该项目将开发验证电子病历系统是否符合适用隐私政策所需的功能。

Information systems that handle personal information must adhere tolegal regulations, corporate privacy policies, and contractualagreements designed to protect personal privacy. Relying exclusivelyon application designers and developers for such assurances isunrealistic. There is a need for methods and tools that can identifyerrors in the handing of personal data and provide formal assurancesthat personal information is handled appropriately.This project is developing a software development framework that usesnovel language-based techniques to ensure that software enforcesprivacy policies. Privacy policies (based on legal and regulatoryrequirements) are formally specified in temporal logic, and identifycircumstances under which information can be shared (based on criteriasuch as the roles of individuals involved, prior events, and whetherthe data has been aggregated) and future obligations that are incurredas a result of the information sharing. The framework consists ofpolicy analysis tools, a programming language, program analysis toolsthat verify both privacy and declassification policies are enforced,and a runtime environment. Used in concert, these components producedistributed information systems that verifiably handle personalinformation appropriately.The framework being developed by this project will address problemsfaced by many information systems. However, the project will focusespecially on the needs of the medical industry, both with respect topatient records and clinical trials. As medical practice transitionsto electronic medical records, the need for high-assurance systemsbecomes increasingly acute. This project will develop thecapabilities needed to verify that electronic medical recordssystems comply with applicable privacy policies.