A system architecture for subject-centric data sharing

With the rapid growth of online social networks, the mindset of the people about sharing of their personal information has changed significantly. Individuals (data subjects) are more willing to share their personal information with others. However, contemporary data sharing mechanisms often do not capture the individual's fine-grained data sharing requirements. Furthermore, data subjects have to use diverse access control mechanisms available for each different data custodian to control its dissemination, which often lead to data and privacy leakage. To overcome these limitations, we present a novel system architecture puts the data subject in charge of selectively assigning access rights to resources using a centralized authorization manager. We have also implemented a prototype to show how the proposed subject-centric and privacy-preserving data sharing framework works.