Abstract Accountability Language - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

Abstract Accountability Language


Usual preventive security mechanisms are not adequate for a world where personal data can be exchanged on-line between different parties and/or stored at multiple jurisdictions. Accountability becomes a necessary principle for future computer systems. This is specially critical for the cloud and Web applications that collect personal and sensitive data from end users. Accountability regards the responsibility and liability (including other attributes) for the data handling performed by a computer system on behalf of an organisation. In case of misconduct (e.g. security breaches, personal data leak, etc.), accountability should imply in remediation and redress actions, as in the real life. Contrary to data privacy, which is already supported by several concrete languages, there is currently no language supporting accountability obligations representation. In this work, we provide an abstract language for accountability obligations representation. We analyze two use cases to illustrate the efficiency of our approach in representing accountability obligations in realistic situations.
No file

Dates and versions

hal-00973399 , version 1 (04-04-2014)


  • HAL Id : hal-00973399 , version 1


Walid Benghabrit, Hervé Grall, Jean-Claude Royer, Mohamed Sellami, Karin Bernsmed, et al.. Abstract Accountability Language. IFIPTM - 8th IFIP WG 11.11 International Conference on Trust Management, Jul 2014, Singapore, Singapore. pp.229--236. ⟨hal-00973399⟩
230 View
0 Download


Gmail Facebook X LinkedIn More