Enhancing Web Privacy Protection through Declarative Policies
Loading...
Files
Links to Files
Permanent Link
Author/Creator ORCID
Date
2005-06-07
Type of Work
Department
Program
Citation of Original Publication
Pranam Kolari, Li Ding, Shashidhara Ganjugunte, Lalana Kagal, Anupam Joshi, and Tim Finin, Enhancing Web Privacy Protection through Declarative Policies, Proceedings of the IEEE Workshop on Policy for Distributed Systems and Networks(POLICY 2005), DOI: 10.1109/POLICY.2005.15
Rights
This item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.
© 2005 IEEE
© 2005 IEEE
Abstract
The Platform for Privacy Preferences (P3P) is a W3C framework for web privacy management. It provides a standard vocabulary that websites can use to describe their privacy practices. The presence of website published P3P policies enable users to configure web browsers to allow, block or warn users during access and data exchange with websites. It's a good idea that unfortunately is rarely used. We identify three primary reasons: (i) the languages available to describe user privacy preferences are not sufficiently expressive, (ii) P3P policies published by websites are not trusted by users and (iii) P3P framework does not provide a coherent view of available privacy protection mechanisms to the user. Towards addressing these issues; we present enhancements to the P3P framework. We use a more expressive policy language based on deontic concepts to describe users privacy-related policies, constraints and preferences. We introduce a new trust model for websites and describe its use in user privacy preferences. Finally, we present sample policies to demonstrate the relevance of our work and offer it as an effective starting point towards enhancing Web Privacy Protection.