Computer systems that store and manage information about individuals often face challenges with privacy rules. Such rules go beyond basic technologies like encryption and access control to encompass a rich collection of considerations where the subject of a piece of information must be given some say over how the holder of the information may use and distribute it. This project looks at ways to express these rules more formally to help capture privacy requirements and prove that privacy systems conform to them. It also considers more systematic ways to learn privacy attitudes and how to apply this information to designing computer systems that manage privacy risk.

People

• Jodie P. Boyer
• Carl A. Gunter
• Michael J. May
• Stuart Stubblebine

Publications

• Privacy APIs: Access Control Techniques to Analyze and Verify Legal Privacy Policies,
  Michael J. May, Carl A. Gunter, Insup Lee.
  IEEE Computer Security Foundations Workshop (CSFW 06), Venice, Italy, July 2006.
• Privacy Sensitive Location Information Systems in Smart Buildings, ,
  Jodie P. Boyer, Kaijun Tan and Carl A. Gunter
  Springer Security in Pervasive Computing (SPC '06), LNCS, pages 149-164, York, UK, April 2006 [PPT ][BIB]
• The Consistency of Task-Based Authorization Constraints in Workflow Systems,
  Kaijun Tan, Jason Crampton, Carl A. Gunter.
  IEEE Computer Security Foundations Workshop (CSFW 04), Monterey, CA, July 2004.
• A Formal Privacy System and its Application to Location Based Services,
  Carl A. Gunter, Michael J. May, Stuart Stubblebine.
  Privacy Enhancing Technologies (PET '04), Toronoto, Canada, May 2004.

Our Links

• Privacy Systems
• Janus's Map

• Course Materials
  • Monitoring and Surveillance, Lecture by Carl Gunter for UIUC course CS563.
  • Schedule for Nikita Borisov's course on privacy
• Michael May's Location Privacy Bibliography

Reading List

• Concepts for personal location privacy policies,
  Einar Snekkenes.
  ACM Conference on Electronic Commerce, pages 48-57. ACM Press, 2001
• The Unwanted Gaze,
  Jeffrey Rosen.
  Vintage, 2001. ISBN 0679765204
• The Right to Privacy,
  Samuel D. Warren and Louis D. Brandeis.
  Harvard Law Review Vol. IV. December 15, 1890. No. 5.
• From Privacy Promises to Privacy Management: a new approach for enforcing privacy throughout an enterprise,
  Paul Ashley, Calvin Powers, and Matthias Schunter.
  New Security Paradigms, Workshop (NSPW 02), 2002.
  
• Web privacy with P3P,
  Lorrie Cranor.
  O'Reilly and Associates, 2002. ISBN 0-596-00371-4
• Platform for Privacy Preferences (P3P) Project.
  World Wide Web Consortium.
  

Other Links

• NCSU
  • The Privacy Place
  • Cyber Defense Laboratory

This page is maintained by Jodie Boyer