P3P and Database Integration

Hello Christophe,

a more technical Paper on integrating P3P privacy policies with databases
is

LeFevre, K., Agrawal, R., Ercegovac, V., Ramakrishnan, R., Xu, Y., and
DeWitt, D.J. Limiting disclosure in hippocratic databases. In Proceedings
of the Thirtieth International Conference on Very Large Data Bases (VLDB
2004), Morgang Kaufmann, pp. 108-119, 2004.

Operationally, they rewrite SQL queries to respect disclosure limitations.
Attribute values to be kept secret are replaced by null values. Hence,
Privacy Protection is implemented by Access Control. As a consequence
anonymized computation of aggregates over attributes is no longer possible.

Consider the case where a customer's sex must not be disclosed. However
disclosing the ratio of female customers is ok as it not possible to derive
data for individual customers. Latter can be done easily by two SQL count
aggregate functions. Yet, aggregate functions ignore null values, which
makes it impossible to calculate the statistics.

Best regards, Sören.

Sören Preibusch
German Institute for Economic Research

-----www-p3p-policy-request@w3.org schrieb: -----

An: carter@codeinfusion.com
Von: Christophe CAILLE <christophe.caille@insa-lyon.fr>
Gesendet von: www-p3p-policy-request@w3.org
Datum: 01.02.2007 08:22
Kopie: www-p3p-policy@w3.org
Thema: Re: Compact Policy XSL


Hello,

I seek how to store the P3P policy in a Database as Oracle. or other
product (DB2,SQL Server ...)

I work actually on the concept of hippocratic database invoked by rakesh
Agrawal in 2001.

Well, i  learned how work P3P, and now i try the technologies of
security suh as : Oracle Virtual Private Database, Oracle Label
Security, Oracle Database Vault ...

But, now  i seek a means for link P3P with these security technology.

If somebody have some knolewdge on this subject ...

Best regards;

Christophe CAILLE.
Student  Engineer