Team for Research in
Ubiquitous Secure Technology

Citation
M. Stamp, H.-H. Lee. "An agent-based privacy enhancing model". Information Management & Computer Security, 2008.

Abstract
Purpose: In this paper, we discuss a privacy enhancing model, which is designed to help Web users protect their private information. Our model employs a collection of software agents. Privacy-related decisions are made based on Platform for Privacy Preferences Project (P3P) information collected by the agents. Approach: Based on collected P3P information and user preferences, our software agents play a role in the decision-making process. In this paper, we present the design of our agent-based privacy enhancing model and we consider the benefits and utility of such an approach. Findings: We argue that our approach is feasible and it provides an effective solution to the usability limitations associated with P3P. Limitations: We have focused primarily on usability issues related to P3P. Consequently some of the ancillary security-related issues that arise are not covered in detail. We also do not cover the development of an appropriate ontology in significant detail. Practical Implications: Based on our analysis and extensive testing of our prototype, we believe that the privacy enhancing model presented in this paper provides a sound basis for privacy protection on the Web. While our emphasis here is on resolving the usability problems associated with P3P, a few straightforward enhancements to our implementation would make it a genuinely practical tool. Originality: The usability of the P3P framework is generally considered its weak point. In this paper, we provide a practical solution to this usability problem. The authors are not aware of any comparable work.

Electronic downloads

• HTML

  M. Stamp, H.-H. Lee. <a
  href="http://www.truststc.org/pubs/426.html"
  >An agent-based privacy enhancing model</a>,
  <i>Information Management & Computer
  Security</i>,  2008.

• Plain text

  M. Stamp, H.-H. Lee. "An agent-based privacy enhancing
  model". <i>Information Management & Computer
  Security</i>,  2008.

• BibTeX

  @article{StampLee08_AgentbasedPrivacyEnhancingModel,
      author = {M. Stamp and H.-H. Lee},
      title = {An agent-based privacy enhancing model},
      journal = {Information Management \& Computer Security},
      year = {2008},
      abstract = {Purpose: In this paper, we discuss a privacy
                enhancing model, which is designed to help Web
                users protect their private information. Our model
                employs a collection of software agents.
                Privacy-related decisions are made based on
                Platform for Privacy Preferences Project (P3P)
                information collected by the agents. Approach:
                Based on collected P3P information and user
                preferences, our software agents play a role in
                the decision-making process. In this paper, we
                present the design of our agent-based privacy
                enhancing model and we consider the benefits and
                utility of such an approach. Findings: We argue
                that our approach is feasible and it provides an
                effective solution to the usability limitations
                associated with P3P. Limitations: We have focused
                primarily on usability issues related to P3P.
                Consequently some of the ancillary
                security-related issues that arise are not covered
                in detail. We also do not cover the development of
                an appropriate ontology in significant detail.
                Practical Implications: Based on our analysis and
                extensive testing of our prototype, we believe
                that the privacy enhancing model presented in this
                paper provides a sound basis for privacy
                protection on the Web. While our emphasis here is
                on resolving the usability problems associated
                with P3P, a few straightforward enhancements to
                our implementation would make it a genuinely
                practical tool. Originality: The usability of the
                P3P framework is generally considered its weak
                point. In this paper, we provide a practical
                solution to this usability problem. The authors
                are not aware of any comparable work. },
      URL = {http://www.truststc.org/pubs/426.html}
  }
  

Posted by Mark Stamp on 18 Aug 2008.
For additional information, see the Publications FAQ or contact webmaster at www truststc org.