Towards Client Privacy Policy Enforcement for Small-Medium Enterprises

Abstract

As information and communication technologies move towards service orientation, many small-medium enterprises (SMEs) are unlikely to consider possible security implications (such as privacy) due to their limited expertise with technology. Policies are commonly used in existing service oriented environments to secure sensitive data. However, failures such as human error, software malfunction, policy contradiction, etc. can result in privacy breaches. In this paper, we propose a privacy device based on the Fail-Safe concept to show how privacy breaches can be avoided. This device uses client-defined policies to protect data released by the service provider.