Privacy query rewriting algorithm instrumented by a privacy-aware access control model

Said Oulmakhzoune (1, 2) , Nora Cuppens-Boulahia (1, 2) , Frédéric Cuppens (1, 2) , Stéphane Morucci (3) , Mahmoud Barhamgi (4) , Djamal Benslimane (4)

1 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
2 Lab-STICC_TB_CID_SFIIS
3 SWID - SWID
4 SOC - Service Oriented Computing

In this paper we present an approach to instrument a SPARQL query rewriting algorithm enforcing privacy preferences. The term instrument is used to mean supplying appropriate constraints. We show how to design a real and effective instrumentation process of a rewriting algorithm using an existing privacy aware access control model like PrivOrBAC. We take into account various dimensions of privacy preferences through the concepts of consent, accuracy, purpose and recipient. We implement and evaluate our process of privacy enforcement based on a healthcare scenario.

Mots clés: PrivOrBAC; Privacy-aware; Rewriting algorithm; SPARQL; RDF

Domaines: Réseaux et télécommunications [cs.NI]

Said Oulmakhzoune, Nora Cuppens-Boulahia, Frédéric Cuppens, Stéphane Morucci, Mahmoud Barhamgi, et al.. Privacy query rewriting algorithm instrumented by a privacy-aware access control model. Annals of Telecommunications - annales des télécommunications, 2013, ⟨10.1007/s12243-013-0365-8⟩. ⟨hal-00869138⟩