PRIVACY VERIFICATION TOOL

摘要

Systems and methods for protecting the privacy of users by controlling access to the users' data. In particular, some embodiments provide for a higher-level declarative language for expressing privacy policies which can be verified using a computer-aided verification tool. The verification tool uses the expressed privacy policies along with language-level assumptions and assertions in the verification process. For example, high-level models of the privacy policies can be reduced to a simpler verification representation (e.g., a Boolean representation) based on a set of assertions. This verification representation can then be submitted to a constraint solver (e.g., Satisfiability Modulo Theories solver) for verification.

主权项

1. A method comprising:
retrieving, from a storage location, a storage and privacy service (SPS) program expressing one or more access control rules; generating, using a processor, a verification representation of the SPS program based on one or more assertions; submitting the verification representation to a constraint solver to generate a set of access control outputs; and determining if the set of access control outputs returned from the constraint solver satisfy a desired set of privacy constraints.