International Conference on Cloud Computing and Services Science

CLOSER 2015: Cloud Computing and Services Sciences pp 134-150

From Regulatory Obligations to Enforceable Accountability Policies in the Cloud

  • Walid Benghabrit
  • Hervé Grall
  • Jean-Claude Royer
  • Mohamed Sellami
  • Monir Azraoui
  • Kaoutar Elkhiyaoui
  • Melek Önen
  • Anderson Santana De Oliveira
  • Karin Bernsmed
Conference paper

DOI: 10.1007/978-3-319-25414-2_9

Part of the Communications in Computer and Information Science book series (CCIS, volume 512)
Cite this paper as:
Benghabrit W. et al. (2015) From Regulatory Obligations to Enforceable Accountability Policies in the Cloud. In: Helfert M., Desprez F., Ferguson D., Leymann F., Méndez Munoz V. (eds) Cloud Computing and Services Sciences. CLOSER 2015. Communications in Computer and Information Science, vol 512. Springer, Cham

Abstract

The widespread adoption of the cloud model for service delivery triggered several data protection issues. As a matter of fact, the proper delivery of these services typically involves sharing of personal/business data between the different parties involved in the service provisioning. In order to increase cloud consumer’s trust, there must be guarantees on the fair use of their data. Accountability provides the necessary assurance about the data governance practices to the different stakeholders involved in a cloud service chain. In this context, we propose a framework for the representation of accountability policies. Such policies offer to end-users a clear view of the privacy and accountability clauses asserted by the entities they interact with, as well as means to represent their preferences. Our framework offers two accountability policy languages: (i) an abstract language called AAL devoted for the representation of preferences/clauses in an human readable fashion, and (ii) a concrete one for the implementation of enforceable policies.

Keywords

Accountability Data protection Framework Policy language Policy enforcement 

Copyright information

© Springer International Publishing Switzerland 2015

Authors and Affiliations

  • Walid Benghabrit
    • 1
  • Hervé Grall
    • 1
  • Jean-Claude Royer
    • 1
  • Mohamed Sellami
    • 5
  • Monir Azraoui
    • 2
  • Kaoutar Elkhiyaoui
    • 2
  • Melek Önen
    • 2
  • Anderson Santana De Oliveira
    • 3
  • Karin Bernsmed
    • 4
  1. 1.Mines NantesNantesFrance
  2. 2.EURECOMBiot, Sophia AntipolisFrance
  3. 3.SAP Labs FranceMougins, Sophia AntipolisFrance
  4. 4.SINTEF ICTTrondheimNorway
  5. 5.ISEPIssy Les MoulineauxFrance

Personalised recommendations