A Technique for Enhanced Provision of Appropriate Access to Evidence across Service Provision Chains

TitleA Technique for Enhanced Provision of Appropriate Access to Evidence across Service Provision Chains
Publication TypeConference Paper
Year of Publication2016
AuthorsI. Agudo, A. El Kaafarani, D. Nuñez, and S. Pearson
Conference Name10th International IFIP Summer School on Privacy and Identity Management
Pagination187-204
ISBN Number978-3-319-41762-2
Abstract

Transparency and verifiability are necessary aspects of accountability, but care needs to be taken that auditing is done in a privacy friendly way. There are situations where it would be useful for certain actors to be able to make restricted views within service provision chains on accountability evidence, including logs, available to other actors with specific governance roles. For example, a data subject or a Data Protection Authority (DPA) might want to authorize an accountability agent to act on their behalf, and be given access to certain logs in a way that does not compromise the privacy of other actors or the security of involved data processors. In this paper two cryptographic-based techniques that may address this issue are proposed and assessed.

DOI10.1007/978-3-319-41763-9_13
Citation Keyagudo2016technique

Supported by A4Cloud FISICCO PISCIS