Privacy policy composition of privacy-aware RBAC model for composite WEB services

Privacy has been acknowledged to be a critical requirement for composite services. In the previous research, we have introduced a privacy-preserving access model, but have no chance to detail the specifying of privacy policies for a composite service. However, the privacy policies in the services should be consistent with each other, and it decides the feasibility and effectiveness of the model. Therefore, this paper proposes a privacy policy composition mechanism that uses the existing policies of the atomic services. Through the definition of policies in the model, the rules to create the user profile and data profile have been derived and the profile samples are given. In the end, an application example is shown to explain that how to use the profiles in the composition engine of the model and then give the implementation of the approach.