{'fraction_non_alphanumeric': 0.02403846153846154, 'fraction_numerical': 0.01510989010989011, 'mean_word_length': 5.592760180995475, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
A Policy-Based Security Framework for Privacy-Enhancing Data Access and Usage Control in Grids

IT service providers are obliged to prevent the misuse of their customers’ and users’ personally identifiable information. However, the preservation of user privacy is a challenging key issue in the management of IT services, especially when organizational borders are crossed. This challenge also exists in Grids, where so far, only few of the advantages in research areas such as privacy enhancing technologies and federated identity management have been adopted. In this chapter, we first summarize an analysis of the differences between Grids and the previously dominant model of inter-organizational collaboration. Based on requirements derived thereof, we specify a security framework that demonstrates how well-established policy-based privacy management architectures can be extended to provide the required Grid-specific functionality. We also discuss the necessary steps for integration into existing service provider and service access point infrastructures. Special emphasis is put on privacy policies that can be configured by users themselves, and distinguishing between the initial data access phase and the later data usage control phase. We also discuss the challenges of practically applying the required changes to real-world infrastructures, including delegated administration, monitoring, and auditing. DOI: 10.4018/978-1-60960-603-9.ch008