HAL Id: hal-01506558
https://hal.inria.fr/hal-01506558
Submitted on 12 Apr 2017
HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.
L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.
Distributed under a Creative Commons Attribution| 4.0 International License
Shinsaku Kiyomoto, Toru Nakamura, Haruo Takasaki, Ryu Watanabe, Yutaka Miyake
To cite this version:
Shinsaku Kiyomoto, Toru Nakamura, Haruo Takasaki, Ryu Watanabe, Yutaka Miyake. PPM: Privacy Policy Manager for Personalized Services. 1st Cross-Domain Conference and Workshop on Availabil- ity, Reliability, and Security in Information Systems (CD-ARES), Sep 2013, Regensburg, Germany.
pp.377-392. �hal-01506558�
½
!"#
¾
!!$%& $'( '& ! )! "#
## * $ * + #
,-$ . ( # , /
* #.& # ,& + $ / + #. + $
## #.& # ,& / & 0 $/ $
, 1.& 1 ,& 2/ 31124 ( $, ,$ .,
+ ,5 /#.& # ,&/ , +
+ 6 *$ $/6 *
!
" !
#$ !
% & # '(' )'
'&*%+%
, #-
%%%"
%#./(0123 "".!
% 4 # '
"" %
"%,!%%"
/563#
7 " " !
/113#-
"#8 !
#
9
#."%
#
"" !"
%" !" /213#
. "" :
;)5* "
4%
)(* " #7, /537!
< ="% %" " "
%:" #
""Æ !
% #'/253
"" % %"
#%""4%"
" <</1>3#
$)1*/225>3%
,
"# $
"%
!" % #%
&/2>3 , :
"% "# 9
%%#
. % !
#
"
"#"
" )* %; .? "!
"#
.%"
""#
7 ! !
@%/5A3#.%
#. "
" #
% "
%# " !
#7, ;
#8 "
# !
$ "!"
#
? % %
# . " % "!
# ? 4
" !
# ? ! "
%
# B "
" ) % %* #
B"? % "%
@% # "" /(53 % ,
" ? ? %
%# $?/513?
%#C $/2(3 $
" # $::
% "#
' "
""D #
! <# % !
,#
," " 4
% #?
"!
# ""
#9%";
E %
#-, "
""#
#
)"*
? #
! ) * !
#%
% #
8 %
# -
#
-"
#%"
%
" , #
. % %#
. %
% #%
%" F
,
# %+
% ; "
#7 "
:"" !
" @% #
" +
"# !
"
#
!
" #
""#
.?
" .?" "
$%
"#
! ,%
#7!
#@% #
9"5%#
")*#"4 !
PPM PPM PPM
User Privacy Policy
User Privacy
Policy
User Privacy
Policy
User User User
Register Register Register
Privacy Info.
Privacy Info.
Privacy Info.
Interconnection Interconnection
7+ 1.&1 ,&2/
#." %
%":"
% < %
#9, %
% " "
#.!%!
#.,
% #.
%<4
$"%
#
"# G' !.?H !
" "# . "
%
#' !
4 #G' !.?H
%
%)*
" % #
% : !
# . :
¿
8 #&, $& #, $.$,
. $&$$.$,+, 9$$.$,:#
User Privacy Policy
DB
Service Log DB User Authentication
& Single Sign On
Pseudonym ID Generation
Anonymization Privacy Policy
Generation
Privacy Policy Check User
Terminal
Privacy Policy
Privacy Policy
Service Provider
Pseudonym ID Pseudonym ID
Privacy Policy Auth Request
Pseudonym ID Privacy Data
(Anonymized) Privacy Data
Log
1.&1 ,&2/
" !
4 "#'!
%: " "
#
")*#.!
4
" @%
#.?""
"#9"(%%
# ,"
%"+
-.?9#
9"!"!#"!
.? "
.? #'" !
% " #
4".?
.?:" %
#.?", 2#(#
E- -#
#9" <
#:%
" #
E"#
<
4 %
#
" -#
C @%"
#7""#
" @% #
%, 2#6
E%#
"%"
$"
# 2#0#
7 ')' *#
.
"
#9 , % " ,
=
#
#,"<
6#
$
, %
#7 .?
4 %
4 #
%+
5# 7"D %"#
(# "% :
< .?%: #
" .?#
1# :"
%# "
.?#
#
2# ?" <
#
#
%
6# " #
0# #
7 & %
% "%% ,#
$ %
.?
.?# '
F.? # -4
.? %
# %" F .?
" .?# " < .? "
.?" #
.? :"
".? D % "
" <#
7G .?)*H " !
# %%".?"
.? )* # % " .? !
#7
"
I) * % )*
" 7!(60
" #
#
<#
.?"%%+
I
)
*
%
" F
)* !
" %
# 78 !(60 )7 8
% (60! * " .? "#
" .?
# %:
,"
" #
% # ,
"% !<!
<+ % ) *
, :# .? "
#
" .?"
$& '
" " #.
:"
#. % ;
#
7 : #
J
)>
*
!
)> *# .
I %# .
! # . # .
: !
I
I
I% H% H
H%H#9, ""
= 4
#
: #
!<%
)
* ""
#9, H
I
;
B)%*1 H#J
#.
"" I
% % )
I 5* )
I >*# .
"
# : )
*I
I
I
I
I% )*:
#
:" # 9 " %
:" #, HH
, " "# :
""%#7
:%" ;" "
# : @ H !
H, 1#
% "
# % ,
% :
"# 9 :
#
! " " 4
, :4 /153
!:/163# <
" : , <
#
$$ (#)
' % "
< # !
"% % ;)5*
:" )(* # . )5*
% % )(*
#
!% "
)*!!#
% # %
%% #
, %
! " #J
% #
)*!
%
)*I
#9,
)
*I
I I
I
I % !
# .,
)
I 521
I*I
I I
"# %
" <
#
7 +!
#' < ""
# 9, %
" " %"
%
" % " #7
" #
$* !
@%
.?
:
# %
" ?B # - % " ;
.? .?
.?
%""#
",#
( ! "%
#- <
" #
" .?%
"
.?#
4 # "
< <
+%""%""#
$+ ,-
7 "
#9"%
% F #
F %
#
%
F
# #
F
4<4#
" # "
# " #
7 <"#
7 %" #
7 ": #
7 ""#
7%
# :%
# % %
4 # :
#7
%#7
#"
%+
5# ,,"
" !!:!
? % 7 : )?8! 7* J 5#(
/503#8:
,
," #
(# % " # 7
!"
. %%""
"#
*
. " ).* /A3 < !
% %" ! #
! . /5K(3
.# - "
% " .? ).?*
) *# .? < !
# L# 7 %
./(3#% .
%"#
*
B/555(3,%%!
1 %#% /113""
"B!
< ""!%#
! 1! " /113
":"% #
/2M3 #
% !
%#B% "
/M3@ "% !
< #B/203
" 4
4 !
%# B
$ : %"
+ % :
#/K3 % %
#
"" /5>52
03#B, "
,, /23#
$C $/2(3"
% ""
"% " %
# ? )? *
*& . /
7/1A3 !%"%!
" " % % #
/((3 :"% "!%
% "%
%%#= %""4
" "/(M3#
@,%/(K3 " # !
F!
<%# /1(3
%F%
")GH*#
" J /(A3
% ": $)*
" ,# Æ
"
! # /1M3
" #= =%
/(63""G"H4" %
5 # = J /(13
% " "
# "!
Æ /1K3#
%" /1063# . /(23 %
% " "# %
% <
# 7" /13
! %"#!
/(>265M3"F
"#
# $ %
! ""
# "
,@% # '
" "
, "
? # . !
@% " # 9 "
# 7 @,
% "
" # 7""
! % @%
% #
" "
, " " "#
0 - % % 8"
."? '")8?'* $H?!
#H
77>$"? ',/ 1.&$ ,&$.$,$ '
/ 345@!!
"7,$#A>57+* '+ * '$
& /
!"##/)=@!!!
%77$/2% %#$B$ 1 7
+ $## + # /, #.&$ %
&' 345@<!
) 2, C'?D 0,$ C//$ 2 EÆ
# +##.&# , (! )*&+
*7%:!)#/<@ !!)
CC11$(0/## / & , >
, . * #.&/$ ( ,! -
- - %&( .---/0 #/<@)!!
C' F C 2# $ 2 G#,;, #.&
,'#,/& .& 0
&( #/@!!
< C* 1.& # , / / + #
&&- ! .1&- !0
&( #/<!@<!
2' C&,$" ,/$', 1$ $%,H'
7.$ 2 /& *# (! /*& !
! 2:! #/ <@=!!!
= .$ 0 %$*' $$ $& / # (
*$ 2#/=@!!!=
! % 1#5'/#.&# , +,
345!@!!
% 2, 7, $ 1. ?$ A + ##
/&,&$ # (! *& !
! 01E:!#/@!!!
% 1. ?$ $ 2, 7, A + +
#.&/ *&' &+3 345@< !!
1 $& $ + # ,, $ ,
. 4 $% - % !!
) 7 / 8A$-$ 2 $ ( *$ #..+ ,#
.&,//* ( *- !
7$I' 7$$/#.&#$ ;&;#$$#.&*
;#, + ;*. ( 5(
!5<@ !!
( '$ E , (# ,&& 3(4# , .
'# .'#01#&6)!!
< %* '2& 8$7%,/ .&
#.$,& ('&&5&. , <#/@ )
!!
( E# 2 H, $ ?. E,/ , * # , $
& / &, &&,
&( #/!@<!!<
= E 1# & /5 ##, $ J #$
K &)345@)!!
! E/$"2&*##/5B &$,
$ ($)5&. ,!!#/)@=!!)
( E,# $ H// # , $. 3 3
!!=
2* $' $ C . 1. . / *
#.& ( 1 !'!1 1+'1+ + !!
2 ?$'$ 7 -, && $,+ # /,
#.& ( ! 6! &( $ % &
.&$&60#/!@=!!
) ?? 1 , $ '$ # , 1B L
E5 7 & , $
>$$ ,& ( ! - -
- %&( .---,0#/<@ !!!<
2 ? $ ?*,$ 7 & / + , $ .
/ #, $ # , , '/ ( ! &+
( % * .%70#/@
!!
'?C%/$1, %,,// ,$.
/& (! !*&8&(
2%:!#/ @ <!!
< '?7,;&-' .(/H$H$$$$1,
./ $ + , , + #+ #.&$ # 9 ( !
/!*& - !3 ' .3+20 3'' 9:
!!=
2,H$$81.&*# ,- + ,$.
/ (! *& ( & +
%%:#/@<!
= " H / $ " 7 $& 7 + #.&. >
#/ (! &( % *+
.%)0#/<<@ =!!)
! %, " % , 1 $ % " 1.& # +
5 ,+# . .$ . ; 3+& 3
45!@<!!
1'?/ ,,&1,H',8 $$ %
A ,,,,/ +&$#.&# , (!
*& ! - !* 7:! #/@ !!
H $ FF/*$( 7 & >
/ $+ , $ . ( &+
" ,$?1, ?/$$,#.&#+
*% 1 % : *1 9: &(
#/==@!!!=
) 7,'$ , . 1.& . , / /$ $57 $&
(! &( $- +
!%20:!#/)<)@) !!
", ?/ G/ " H /$8 $ 2 $,/ # #,:
#, / #+ , / ( ! ! *&
( <%=A #:!#/<@ )!!
2$%C 7 # +#,/,- ,/ +
,#.&#. (! - ! +
* 5+>% .*5,0 #/ @!!<
< 22 ',( *$#.&*, $$. (
! &( - !.&$-0
#/=@!!!
22 ',%F% *$0?7+(*#5M&# /+
, .* # /#.& (! 7
&( 2 5 $> .25$>0 #/<@<<)!!
= 7.$8&8$(/2/$'2,H/
$ C #.&. #. # ;& / ( !
$ % $ !
)! 71$ 1# ,# /# , 5?> +
5!@!!
) 1 ,, 0: * / * , #.& # ,N & *&
!3=45!@! !!<
) , 1 ..$ , #/ 4 (! > +
& ( 3 < !
) ," , . 1.&,+/$ #$ ; 3 5
1 !
)) 0% (#,+ + #.&#+ !311!4#9 (
( ( .70 4 !!
) 0E 0', 2'/$$9 $+ #, $5
..*$# , ($)5&. ,!!#/
@)!!)
) 0 % # 7 2$.#$$& $ 2 , 1.& ,5 7
# ,#.&//+ ,# &
&- !.1&- !0 /!
&( #/<@<<!!
)< ?2 F 7 #.& # ,& / '+ .
*% 1 % : *1 9: &(
#/!<@!!=