A Cloud Accountability Policy Representation Framework - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

A Cloud Accountability Policy Representation Framework

Abstract

Nowadays we are witnessing the democratization of cloud services. As a result, more and more end- users (individuals and businesses) are using these services for achieving their electronic transactions (shopping, administrative procedures, B2B transactions, etc.). In such scenarios, personal data is generally flowed between several entities and end-users need (i) to be aware of the management, processing, storage and retention of personal data, and (ii) to have necessary means to hold service providers accountable for the usage of their data. In fact, dealing with personal data raises several privacy and accountability issues that must be considered before to promote the use of cloud services. In this paper, we propose a framework for the representation of cloud accountability policies. Such policies offer to end-users a clear view of the privacy and accountability obligations asserted by the entities they interact with, as well as means to represent their preferences. This framework comes with two novel accountability policy languages. An abstract one devoted for the representation of preferences/obligations in an human readable fashion. And a concrete one for the mapping to concrete enforceable policies. We motivate our solution with concrete use case scenarios.

Domains

Web
Not file

Dates and versions

hal-00941872 , version 1 (04-02-2014)

Identifiers

  • HAL Id : hal-00941872 , version 1

Cite

Walid Benghabrit, Hervé Grall, Jean-Claude Royer, Mohamed Sellami, Monir Azraoui, et al.. A Cloud Accountability Policy Representation Framework. CLOSER - 4th International Conference on Cloud Computing and Services Science, Apr 2014, Barcelone, Spain. ⟨hal-00941872⟩
406 View
0 Download

Share

Gmail Facebook Twitter LinkedIn More