Using AOP-based enforcement of prioritised XACML policies for location privacy Online publication date: Sat, 19-Jul-2014
by Thomas Scheffler; Sven Schindler; Bettina Schnor
International Journal of Internet Technology and Secured Transactions (IJITST), Vol. 5, No. 1, 2013
Abstract: Location-based services have become more and more popular over the last years and allow the tracking of persons and goods. Users of these services often have little control over their private data as it is accessed, processed and stored. This paper presents a privacy enforcement concept that combines a sticky-policy approach with an aspect-oriented programming-based reference monitor. Furthermore, we introduce prioritised policies which allow users to define their own access rules without accidentally generating inconsistent rule sets. For the implementation of this concept, we propose a new XACML combining algorithm, the priority policy combining algorithm. We demonstrate the feasibility and ease-of-use of our concept with the example of a theme-park location service.
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Internet Technology and Secured Transactions (IJITST):
Login with your Inderscience username and password:
Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.
If you still need assistance, please email subs@inderscience.com