A Cloud Accountability Policy Representation Framework - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2014

A Cloud Accountability Policy Representation Framework

Résumé

Nowadays we are witnessing the democratization of cloud services. As a result, more and more end- users (individuals and businesses) are using these services for achieving their electronic transactions (shopping, administrative procedures, B2B transactions, etc.). In such scenarios, personal data is generally flowed between several entities and end-users need (i) to be aware of the management, processing, storage and retention of personal data, and (ii) to have necessary means to hold service providers accountable for the usage of their data. In fact, dealing with personal data raises several privacy and accountability issues that must be considered before to promote the use of cloud services. In this paper, we propose a framework for the representation of cloud accountability policies. Such policies offer to end-users a clear view of the privacy and accountability obligations asserted by the entities they interact with, as well as means to represent their preferences. This framework comes with two novel accountability policy languages. An abstract one devoted for the representation of preferences/obligations in an human readable fashion. And a concrete one for the mapping to concrete enforceable policies. We motivate our solution with concrete use case scenarios.

Domaines

Web
Fichier non déposé

Dates et versions

hal-00941872 , version 1 (04-02-2014)

Identifiants

  • HAL Id : hal-00941872 , version 1

Citer

Walid Benghabrit, Hervé Grall, Jean-Claude Royer, Mohamed Sellami, Monir Azraoui, et al.. A Cloud Accountability Policy Representation Framework. CLOSER - 4th International Conference on Cloud Computing and Services Science, Apr 2014, Barcelone, Spain. ⟨hal-00941872⟩
473 Consultations
0 Téléchargements

Partager

More