Data Consumer Sample Clauses

Data Consumer. This last pillar holds abstractions for representing data consumers, in particular consumers of context information that depend on external data collectors to implement their respective services, e.g a “Restaurant Finder” or a “Buddy Finder” service. Obviously, these are the main types of emerging services in pervasive computing. However, context providers and service providers are typically decoupled and operate independently from each other and, thus, must be orchestrated. The privacy enforcement model we present here is built around direct, one-to-one binding agreements between the Trusted Privacy Manager and the other two pillars, as shown in Figure 3. The Trusted Privacy Manager acts as mediator between data collectors and data consumers. It reduces and simplifies potentially complex relationships between them to contractual two-part agreements, on previously negotiated obligations, avoiding direct exchange of data between data collectors and data consumers. The idea behind the use of agreements is twofold: to specify actions allowed on disclosed data and to avoid any uncontrolled disclosure that may lead to unwanted exchanges of sensitive data. The collaboration between pillars is built around three functional blocks, Bilateral Privacy Access Control, Obligations Negotiation and Management, and Obligations Tracking as it is shown in Figure 2. They are complementary and depend on each other to guarantee a holistic privacy protection. The first level of collaboration (Bilateral Privacy Access Control) demands from each part to include privacy-aware access control mechanisms. Note that only in the case of the Trusted Privacy Manager access control should be context-aware, since is the only tier that should have access to any user context data. Bilateral access control means that both the service side privacy policy and a user's privacy policy should be evaluated before revealing any data. How this is achieved may differ in each case. The second level, the Obligations Negotiation and Management, requires from all three pillars to adopt a common model for the specification of obligations and trust that data collectors and data consumers will handle personal data according to such obligations. The third level Obligations Tracking was introduced as an initial measure for trust management and to allow lifecycle awareness of the data. Our approach to establish a trusted relationship between an enterprise service and the Trusted Privacy Manager is based on the...