Location-Based Access Control (LBAC) systems support the evaluation of conditions on locations in the enforcement of access. control policies. The ability to evaluate conditions on a set of authorized locations has a number of well-known advantages, including enriching access control expressiveness. However, when locations are used in combination with personal identities, users privacy must be considered. In this paper, we describe a solution to integrate a LBAC system with privacy-enhanced techniques based on location obfuscation. Our solution is based on a privacy-aware middleware component that explicitly addresses the trade-off between users privacy and location accuracy by satisfying preferences set by users and maximizing the quality of location information released to LBAC systems.

A middleware architecture for integrating privacy preferences and location accuracy / C.A. Ardagna, M. Cremonini, E. Damiani, S. De Capitani di Vimercati, P. Samarati - In: New approaches for security, privacy and trust in complex environments : proceedings of the IFITC-11 22. International Information Security Conference (SEC 2007) : 14-16 may 2007, Sandton, South Africa / [a cura di] Hein Venter ... [et al.]. - New York : Springer, 2007. - ISBN 9780387723662. - pp. 313-324 (( Intervento presentato al 22. convegno International Conference on Information Security (IFIP TC11) tenutosi a Sandton, South Africa nel 2007.

A middleware architecture for integrating privacy preferences and location accuracy

C.A. Ardagna
Primo
;
M. Cremonini
Secondo
;
E. Damiani;S. De Capitani di Vimercati
Penultimo
;
P. Samarati
Ultimo
2007

Abstract

Location-Based Access Control (LBAC) systems support the evaluation of conditions on locations in the enforcement of access. control policies. The ability to evaluate conditions on a set of authorized locations has a number of well-known advantages, including enriching access control expressiveness. However, when locations are used in combination with personal identities, users privacy must be considered. In this paper, we describe a solution to integrate a LBAC system with privacy-enhanced techniques based on location obfuscation. Our solution is based on a privacy-aware middleware component that explicitly addresses the trade-off between users privacy and location accuracy by satisfying preferences set by users and maximizing the quality of location information released to LBAC systems.
Location-based access control ; Privacy ; Obfuscation
Settore INF/01 - Informatica
Book Part (author)
File in questo prodotto:
Non ci sono file associati a questo prodotto.
Pubblicazioni consigliate

Caricamento pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/2434/34454
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 14
  • ???jsp.display-item.citation.isi??? 5
social impact