Entrusting a Responsibility of Personal Information Management to Users from a Service Provider

Nowadays, various network services, such as online shops and reservation of facilities, have been used with the spread of the Internet. Some of these services request users to offer personal information. However, incidents such as information leakage are occurring frequently. Thus, the responsibility of personal information management is burden for service providers. On the other hand, users cannot know how service providers use their offered personal information. Thus, the users feel uneasy to offering personal information to the service providers. Therefore, we propose a framework that a user can designate the usage procedure of his/her personal information. A service provider can entrust the responsibility of personal information management to a user because the service provider does not determine usage procedures but the user determines. Additionally, since the user can know the usage procedure of his/her personal information, the user feels easy to offering personal information. In this paper, we discuss policies (a protection policy and a use policy) defined in this framework.