International Conference on Cloud Computing and Services Science

Cloud Computing and Services Sciences pp 134-150

From Regulatory Obligations to Enforceable Accountability Policies in the Cloud

  • Walid Benghabrit
  • Hervé Grall
  • Jean-Claude Royer
  • Mohamed Sellami
  • Monir Azraoui
  • Kaoutar Elkhiyaoui
  • Melek Önen
  • Anderson Santana De Oliveira
  • Karin Bernsmed
Conference paper

DOI: 10.1007/978-3-319-25414-2_9

Volume 512 of the book series Communications in Computer and Information Science (CCIS)
Cite this paper as:
Benghabrit W. et al. (2015) From Regulatory Obligations to Enforceable Accountability Policies in the Cloud. In: Helfert M., Desprez F., Ferguson D., Leymann F., Méndez Muñoz V. (eds) Cloud Computing and Services Sciences. Communications in Computer and Information Science, vol 512. Springer, Cham

Abstract

The widespread adoption of the cloud model for service delivery triggered several data protection issues. As a matter of fact, the proper delivery of these services typically involves sharing of personal/business data between the different parties involved in the service provisioning. In order to increase cloud consumer’s trust, there must be guarantees on the fair use of their data. Accountability provides the necessary assurance about the data governance practices to the different stakeholders involved in a cloud service chain. In this context, we propose a framework for the representation of accountability policies. Such policies offer to end-users a clear view of the privacy and accountability clauses asserted by the entities they interact with, as well as means to represent their preferences. Our framework offers two accountability policy languages: (i) an abstract language called AAL devoted for the representation of preferences/clauses in an human readable fashion, and (ii) a concrete one for the implementation of enforceable policies.

Keywords

Accountability Data protection Framework Policy language Policy enforcement 

Copyright information

© Springer International Publishing Switzerland 2015

Authors and Affiliations

  • Walid Benghabrit
    • 1
  • Hervé Grall
    • 1
  • Jean-Claude Royer
    • 1
  • Mohamed Sellami
    • 5
  • Monir Azraoui
    • 2
  • Kaoutar Elkhiyaoui
    • 2
  • Melek Önen
    • 2
  • Anderson Santana De Oliveira
    • 3
  • Karin Bernsmed
    • 4
  1. 1.Mines NantesNantesFrance
  2. 2.EURECOMBiot, Sophia AntipolisFrance
  3. 3.SAP Labs FranceMougins, Sophia AntipolisFrance
  4. 4.SINTEF ICTTrondheimNorway
  5. 5.ISEPIssy Les MoulineauxFrance