A Galois lattice approach to a context-aware privacy negotiation service

Online privacy has consistently been a major concern for customers that has grown commensurately with the growth of e-services. Service providers have responded by making their privacy policies clearer for customers; however, most providers use legacy systems that are unable to actually change and adapt to user's concerns, which can lead to fewer customers using the system. Hence, the purpose of this paper is to propose a context-aware privacy policy negotiation service. To do so, we adopt a Galois lattice theory to generate policy concepts embedded in e-services. Based on the Galois lattice, we develop a process for generating privacy policy rules. To show the feasibility of the ideas proposed in this paper, we perform a simulation test with two different online auction sites as an illustrative case in terms of two metrics: the number of rules generated and success throughput. Desirable features in applying the Galois lattice approach to context-aware privacy policy negotiation service are discussed.

[1]  Ramnath K. Chellappa,et al.  Personalization versus Privacy: An Empirical Examination of the Online Consumer’s Dilemma , 2005, Inf. Technol. Manag..

[2]  R. Bies,et al.  Consumer Privacy: Balancing Economic and Justice Considerations , 2003 .

[3]  M. Culnan.  Consumer awareness of name removal procedures: Implications for direct marketing , 1995 .

[4]  Ismail Hakki Toroslu,et al.  A Semantic-Based User Privacy Protection Framework for Web Services , 2003, ITWP.

[5]  Chen Wang,et al.  Consumer privacy concerns about Internet marketing , 1998, CACM.

[6]  Alessandro Acquisti,et al.  Privacy and rationality in individual decision making , 2005, IEEE Security & Privacy.

[7]  Paul Wang,et al.  Relationship issues in creating the customer database , 1993 .

[8]  L. Thompson,et al.  The Mind and Heart of the Negotiator , 1997 .

[9]  R. Wille.  Concept lattices and conceptual knowledge systems , 1992 .

[10]  M. Jones.  Privacy: A Significant Marketing Issue for the 1990s , 1991 .

[11]  Peter Bodorik,et al.  Architecture for user-controlled e-privacy , 2003, SAC '03.

[12]  Marc Langheinrich,et al.  The platform for privacy preferences 1.0 (p3p1.0) specification , 2002 .

[13]  Wenliang Du,et al.  Privacy-Preserving Collaborative Filtering , 2005, Int. J. Electron. Commer..

[14]  T. Graeff,et al.  Collecting and using personal data: consumers’ awareness and concerns , 2002 .

[15]  Marc Langheinrich,et al.  Privacy and trust issues with invisible computers , 2005, CACM.

[16]  Stefan Stieger,et al.  Internet users' perceptions of 'privacy concerns' and 'privacy actions' , 2007, Int. J. Hum. Comput. Stud..

[17]  Kai Lung Hui,et al.  Consumer Privacy and Marketing Avoidance: A Static Model , 2008, Manag. Sci..

[18]  Anthony D. Miyazaki,et al.  Consumer Perceptions of Privacy and Security Risks for Online Shopping , 2001 .

[19]  Lorrie Faith Cranor,et al.  The platform for privacy preferences , 1999, CACM.

[20]  Manuel Samuelides,et al.  Galois Lattice Theory for Probabilistic Visual Landmarks , 2004, J. Univers. Comput. Sci..

[21]  M. E. Gordon,et al.  Direct Mail Privacy-Efficiency Trade-offs within an Implied Social Contract Framework , 1993 .

[22]  H. Teo,et al.  Volunteering personal information on the internet: Effects of reputation, privacy notices, and rewards on online consumer behavior , 2004 .

[23]  Mark S. Ackerman,et al.  Privacy in e-commerce: examining user scenarios and privacy preferences , 1999, EC '99.

[24]  J. Phelps,et al.  Privacy Concerns and Consumer Willingness to Provide Personal Information , 2000 .

[25]  David C. Yen,et al.  A new reverse auction agent system for m-commerce using mobile agents , 2005, Comput. Stand. Interfaces.

[26]  Sören Preibusch.  Personalized Services with Negotiable Privacy Policies , 2006 .

[27]  H. Jeff Smith,et al.  Information Privacy: Measuring Individuals' Concerns About Organizational Practices , 1996, MIS Q..

[28]  Oliver Günther,et al.  Privacy in e-commerce: stated preferences vs. actual behavior , 2005, CACM.

[29]  Dane K. Peterson,et al.  Privacy Policy Statements and Consumer Willingness to Provide Personal Information , 2006, J. Electron. Commer. Organ..

[30]  John Karat,et al.  Privacy in information technology: Designing to enable privacy policy management in organizations , 2005, Int. J. Hum. Comput. Stud..

[31]  H. Raghav Rao,et al.  A trust-based consumer decision-making model in electronic commerce: The role of trust, perceived risk, and their antecedents , 2008, Decis. Support Syst..

[32]  Sören Preibusch,et al.  Implementing Privacy Negotiations in E-Commerce , 2006, APWeb.

[33]  K. Sheehan,et al.  Dimensions of Privacy Concern among Online Consumers , 2000 .

[34]  D. E. Palmer.  Pop-Ups, Cookies, and Spam: Toward a Deeper Analysis of the Ethical Significance of Internet Marketing Practices , 2005 .

[35]  Barbara L. Gross,et al.  What consumers know and what they do: An investigation of consumer knowledge, awareness, and use of privacy protection strategies , 2003 .