A framework for privacy aware data management in relational databases. (1st January 2014)

• Record Type: Journal Article
• Authors: Colombo, Pietro; Ferrari, Elena
• Is Part Of: International journal of information privacy, security and integrity. Volume 2:Number 1(2014)
• Page Start: 56
• Page End: 78
• Publication Date: 2014-01-01
• Subjects: privacy aware data management -- privacy policies -- relational databases -- model driven development -- Object Constraint Language -- OCL -- Atlas Transformation Language -- ATL; Computer security -- Periodicals; Computer networks -- Access control -- Periodicals; Information technology -- Security measures -- Periodicals; Data protection -- Periodicals; Privacy, Right of -- Periodicals; 005.805
• Languages: English
• ISSNs: 1741-8496

Abstract

This paper is about MAPaS – modelling and analysis of privacy-aware systems – framework, which targets the development of privacy aware SQL queries operating on a given database. MAPaS supports the specification of purpose and role-based access control policies that regulate the access to data based on purpose compliance, role and purpose-based authorisations. The current version of MAPaS allows the definition of the scheme of the database whose data must be protected and the SQL queries that should be executed on such a database. A rich analysis toolkit allows user to assess the compliance of these queries with the specified privacy policies. The analysis can be done even before the database is populated. The use of MAPaS bring users to define SQL queries which are privacy aware by design.