论文信息 - Classification of personal information for privacy protection purposes

Classification of personal information for privacy protection purposes

Laws now in effect require protection of individual privacy in personal information record-keeping systems maintained by the federal government and by several states. These requirements will be extended to the private sphere in the future. It is necessary for their implementation in record-keeping systems to establish a standard sensitivity scale and classification system for personal information. This paper surveys several classification systems that have been discussed in the literature, examines the criteria for setting up such systems, proposes a new sensitivity scale and corresponding classification system, discusses the information integrity and security provisions that should be adequate for each classification level, and examines the problems that arise in assigning sensitivity and classification levels to personal information items, records, and record-keeping systems.

Rein Turn

[1] Yung-Ying Liu,et al. Privacy and Security in Computer Systems. , 1974 .

[2] Jerome H. Saltzer,et al. The protection of information in computer systems , 1975, Proc. IEEE.

[3] Rein Turn,et al. Privacy transformations for databank systems , 1973, AFIPS National Computer Conference.

[4] Ruth M Davis. Guidelines for Automatic Data Processing Physical Security and Risk Management , 1974 .

[5] J.L. Smith,et al. Some cryptographic techniques for machine-to-machine data communications , 1975, Proceedings of the IEEE.

[6] Edward V. Comber. Management of confidential information , 1969, AFIPS '69 (Fall).

[7] Rein Turn. Cost implications of privacy protection in databank systems , 1975, DATB.

[8] Leonard Ellis. Privacy and the computer : steps to practicality : areview of recent work carried out by the Privacy and Public Welfare Committee of the British Computer Society , 1972 .