Enhancing Web Privacy Protection through Declarative Policies

Author/Creator ORCID

Date

2005-06-07

Department

Program

Citation of Original Publication

Pranam Kolari, Li Ding, Shashidhara Ganjugunte, Lalana Kagal, Anupam Joshi, and Tim Finin, Enhancing Web Privacy Protection through Declarative Policies, Proceedings of the IEEE Workshop on Policy for Distributed Systems and Networks(POLICY 2005), DOI: 10.1109/POLICY.2005.15

Rights

This item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.
© 2005 IEEE

Abstract

The Platform for Privacy Preferences (P3P) is a W3C framework for web privacy management. It provides a standard vocabulary that websites can use to describe their privacy practices. The presence of website published P3P policies enable users to configure web browsers to allow, block or warn users during access and data exchange with websites. It's a good idea that unfortunately is rarely used. We identify three primary reasons: (i) the languages available to describe user privacy preferences are not sufficiently expressive, (ii) P3P policies published by websites are not trusted by users and (iii) P3P framework does not provide a coherent view of available privacy protection mechanisms to the user. Towards addressing these issues; we present enhancements to the P3P framework. We use a more expressive policy language based on deontic concepts to describe users privacy-related policies, constraints and preferences. We introduce a new trust model for websites and describe its use in user privacy preferences. Finally, we present sample policies to demonstrate the relevance of our work and offer it as an effective starting point towards enhancing Web Privacy Protection.