Privacy Protection Data Access Control

10.6633/IJNS.201311.15(6).01

Min-Yu Chen；Chou-Chen Yang；Min-Shiang Hwang

Access control ； privacy protection ； purpose-based access control ； role-based access control

International Journal of Network Security

15卷6期（2013 / 11 / 01）

411 - 419

英文

For some purposes, such as benefits, requirement-fitted services and management, enterprises regularly ask customers, employees, and business partner to provide relevance data including sensitive personal information. However, transparent information bring the infringement of privacy and threats of living security to the data providers. Recently, enterprises have suffered from the loss of potential customers and benefits because of the rise of privacy protection consciousness. Therefore, this article researches in the solutions of data privacy protection in enterprises, and classifies into three categories, ”Role-based”, ”Purpose-based”, and ”Extension”. Furthermore, we define three criterions which should be achieved when an enterprise wants to implement a data access system with privacy protection mechanism. We hope it is helpful for enterprises to strengthen privacy protection depending on their own characteristics and requirements.

1. 李坤敏(2016)。用戶端設備廣域網路管理協定之系統效能優化。成功大學工程科學系學位論文。2016。1-89。