Location-Based Access Control (LBAC) systems support the evaluation of conditions on locations in the enforcement of access. control policies. The ability to evaluate conditions on a set of authorized locations has a number of well-known advantages, including enriching access control expressiveness. However, when locations are used in combination with personal identities, users privacy must be considered. In this paper, we describe a solution to integrate a LBAC system with privacy-enhanced techniques based on location obfuscation. Our solution is based on a privacy-aware middleware component that explicitly addresses the trade-off between users privacy and location accuracy by satisfying preferences set by users and maximizing the quality of location information released to LBAC systems.
A middleware architecture for integrating privacy preferences and location accuracy / C.A. Ardagna, M. Cremonini, E. Damiani, S. De Capitani di Vimercati, P. Samarati - In: New approaches for security, privacy and trust in complex environments : proceedings of the IFITC-11 22. International Information Security Conference (SEC 2007) : 14-16 may 2007, Sandton, South Africa / [a cura di] Hein Venter ... [et al.]. - New York : Springer, 2007. - ISBN 9780387723662. - pp. 313-324 (( Intervento presentato al 22. convegno International Conference on Information Security (IFIP TC11) tenutosi a Sandton, South Africa nel 2007.
A middleware architecture for integrating privacy preferences and location accuracy
C.A. ArdagnaPrimo
;M. CremoniniSecondo
;E. Damiani;S. De Capitani di VimercatiPenultimo
;P. SamaratiUltimo
2007
Abstract
Location-Based Access Control (LBAC) systems support the evaluation of conditions on locations in the enforcement of access. control policies. The ability to evaluate conditions on a set of authorized locations has a number of well-known advantages, including enriching access control expressiveness. However, when locations are used in combination with personal identities, users privacy must be considered. In this paper, we describe a solution to integrate a LBAC system with privacy-enhanced techniques based on location obfuscation. Our solution is based on a privacy-aware middleware component that explicitly addresses the trade-off between users privacy and location accuracy by satisfying preferences set by users and maximizing the quality of location information released to LBAC systems.
Pubblicazioni consigliate
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
