Purpose Based Access Control for Privacy Protection in Object Relational Database Systems

Privacy preservation of individuals is a challenging problem in the environment. While current information technology enables people to carry out their business virtually at any time in any place, it also provides the capability to store various types of information the users reveal during their activities. A key feature of our model is that it allows multiple purposes to be associated with each data element and also supports explicit prohibitions, thus allowing privacy offers to specify that some data should not be used for certain purposes. To maintain consistency between the privacy policy and the practices, privacy protection requirements in privacy policy should be formally specified.