The Life-Cycle Policy model

N.L.G. Anciaux, Luc Bouganim, H.J.W. van Heerde, Philippe Pucheral, Peter M.G. Apers

Research output: Book/ReportReportProfessional

28 Downloads (Pure)

Abstract

Our daily life activity leaves digital trails in an increasing number of databases (commercial web sites, internet service providers, search engines, location tracking systems, etc). Personal digital trails are commonly exposed to accidental disclosures resulting from negligence or piracy and to ill-intentioned scrutinization and abusive usages fostered by fuzzy privacy policies. No one is sheltered because a single event (e.g., applying for a job or a credit) can suddenly make our history a precious asset. By definition, access control fails preventing trail disclosures, motivating the integration of the Limited Data Retention principle in legislations protecting data privacy. By this principle, data is withdrawn from a database after a predefined time period. However, this principle is difficult to apply in practice, leading to retain useless sensitive information for years in databases. In this paper, we propose a simple and practical data degradation model where sensitive data undergoes a progressive and irreversible degradation from an accurate state at collection time, to intermediate but still informative degraded states, up to complete disappearance when the data becomes useless. The benefits of data degradation is twofold: (i) by reducing the amount of accurate data, the privacy offence resulting from a trail disclosure is drastically reduced and (ii) degrading the data in line with the application purposes offers a new compromise between privacy preservation and application reach. We introduce in this paper a data degradation model, analyze its impact over core database techniques like storage, indexation and transaction management and propose degradation-aware techniques.
Original languageUndefined
Place of PublicationRocquencourt, France
PublisherInstitut National de Recherche en Informatique et en Automatique
Number of pages25
ISBN (Print)0249-6399
Publication statusPublished - Jul 2008

Publication series

NameRapport de recherche
PublisherInstitut National de Recherche en Informatique et en Automatique
No.WoTUG-31/RR-6577
ISSN (Print)0249-6399

Keywords

  • IR-65185
  • EWI-14530
  • METIS-254958

Cite this

Anciaux, N. L. G., Bouganim, L., van Heerde, H. J. W., Pucheral, P., & Apers, P. M. G. (2008). The Life-Cycle Policy model. (Rapport de recherche; No. WoTUG-31/RR-6577). Rocquencourt, France: Institut National de Recherche en Informatique et en Automatique.