An Implementation Model for Privacy Aware Access Control in Web Services Environment

Abstract

The last decade has witnessed an incremental growth in the number of web service providers as well as web service users who carry out financial transactions online. While this enhanced usage of web to provide financial services has boosted e-business productivity, it has raised significant concerns regarding client’s sensitive personal information privacy. In this paper, we have proposed a framework that addresses client’s privacy concerns in the context of web services environment. Our approach involves service producers storing their privacy policies in the form of an ontology class and service users storing their privacy preferences in the form of a rule specified in semantic web rule language. Our framework provides automated reasoning techniques for matching the service provider’s privacy policies for compliance with the client’s privacy preferences. In the event of a policy match, our framework supports automatic generation of the list of service providers who agree to provide service. We demonstrate our approach with the implementation of an example web services scenario.