TY - GEN
T1 - Distributed privacy-preserving policy reconciliation
AU - Meyer, Ulrike
AU - Wetzel, Susanne
AU - Ioannidis, Sotiris
PY - 2007
Y1 - 2007
N2 - Organizations use security policies to regulate how they share and exchange information, e.g., under what conditions data can be exchanged, what protocols are to be used, who is granted access, etc. Agreement on specific policies is achieved though policy reconciliation, where multiple parties, with possibly different policies, exchange their security policies, resolve differences, and reach a consensus. Current solutions for policy reconciliation do not take into account the privacy concerns of reconciliating parties. This paper addresses the problem of preserving privacy during security policy reconciliation. We introduce new protocols that meet the privacy requirements of the organizations and allow parties to find a common policy rule which maximizes their individual preferences.
AB - Organizations use security policies to regulate how they share and exchange information, e.g., under what conditions data can be exchanged, what protocols are to be used, who is granted access, etc. Agreement on specific policies is achieved though policy reconciliation, where multiple parties, with possibly different policies, exchange their security policies, resolve differences, and reach a consensus. Current solutions for policy reconciliation do not take into account the privacy concerns of reconciliating parties. This paper addresses the problem of preserving privacy during security policy reconciliation. We introduce new protocols that meet the privacy requirements of the organizations and allow parties to find a common policy rule which maximizes their individual preferences.
UR - http://www.scopus.com/inward/record.url?scp=38549147976&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=38549147976&partnerID=8YFLogxK
U2 - 10.1109/ICC.2007.226
DO - 10.1109/ICC.2007.226
M3 - Conference contribution
AN - SCOPUS:38549147976
SN - 1424403537
SN - 9781424403530
T3 - IEEE International Conference on Communications
SP - 1342
EP - 1349
BT - 2007 IEEE International Conference on Communications, ICC'07
T2 - 2007 IEEE International Conference on Communications, ICC'07
Y2 - 24 June 2007 through 28 June 2007
ER -