Policy arbitration method, policy arbitration server, and program

摘要

A policy arbitration method comprises: entering a user policy in which a privacy information holder describes at least one rule that is a pair of a data type of privacy information possessed by the privacy information holder and the way to handle the data type; generating, using the user policy and a service policy set that includes at least one service policy in which a privacy information user describes at least one rule that is a pair of a data type of the privacy information and the way to handle the data type, a ranking of the service policy according to the degree of divergence between the user policy and the service policy; and displaying the service policy ranking on a privacy information holder terminal.

主权项

1. An arbitration server, comprising:
a user policy receiving unit configured to receive from a user a user policy, the user policy describing at least one rule pairing a data type of privacy information possessed by the user and privacy requirements of the user for the data type; a ranking generation unit configured to generate a ranking of at least one service policy of a service policy set based on a degree of divergence between the user policy and the at least one service policy, the at least one service policy describing at least one rule that is a pair of a data type of privacy information and access requirements of the data type of a service; a ranking display unit configured to display the service policy ranking; an agreed policy receiving unit configured to receive a selection of a service policy from the displayed service policy ranking; and an agreed policy storage unit configured to store the selected service policy and apply the selected service policy to the privacy information of the user, wherein the ranking generation unit comprises:
a policy mapping unit configured to map the user policy and the at least one service policy to a user policy vector and service policy vector, respectively, by converting the respective at least one rule into a real value or real-valued vector; anda vector distance calculation unit configured to calculate the degree of divergence using the user policy vector and the service policy vector.