Model-Based Minimum Privacy Disclosure Recommendation for Authorization Policies

This paper presents a privacy disclosure recommendation approach based on a privacy cost model. The approach involves selecting appropriate credentials or attributes from users, and automatically building a new credential to fulfill service's authorization policies. The recommendation principles consider three aspects: (1) the selected user's attributes in the new credential satisfy the requested service's authorization policy, (2) hiding user's credentials and attributes to keep private during the request procedure, and (3) the total privacy cost of users is minimum. In addition, an automated tool is designed and implemented to derive a new credential. The correctness of our approach is demonstrated and validated by a practical case. Experimental results and complexity analysis show that our approach is efficient.