|
概要（英語）
|
Some of Internet services require users to provide their sensitive information
such as credit card number, and an ID-password pair. In these services, the
manner in which the provided information is used is solely determined by the
service providers. As a result, even when the manner in which information is
used by a service provider appears vulnerable, users have no choice but to
allow such usage. In this paper, we propose a framework that enables users to
select the manner in which their sensitive information is protected. In our
framework, a policy, which defines the type of information protection, is
offered as a Security as a Service. According to the policy, users can
incorporate the type of information protection into a program. By allowing a
service provider to use their sensitive information through this program, users
can protect their sensitive information according to the manner chosen by them.
|