Please enable JavaScript.

Coggle requires JavaScript to display documents.

IT Sicherheit - 8.1 Identity, Access, Privacy (Access Control Model…

- - - - Set of attributes, often named (identifier), somtimes certified
    - - claiming and verifying "ownership" pf an identity
    - - identification, linked to some action, often establish accountability
    - - decision by an authority to grant or deny rights / define obligatoins to resources, based on policy
    - - controls provisions
    - - controls obligatoins
- - - - primary rights:
        
        read, write, execute
      - meta rights
        
        own, grant, revoke, create, delete
      - actions
        
        accept, deny, log
      - obligations
        
        notify, deliver
  - - - Mandatory Access Control (MAC) / Mulit Level Security (Bell-LaPadula)
      - "rights are statically defined through higher level policy"
    - - Discretionary Access Control (DAC)
        
        subjects max change policy by executing "commands"
      - Safety
        
        states with certain properties are not reachable - generally undecidable
      - Seperation of Duties (SoD), Seperation of Concerns
        
        certain combinations of rights are forbidden
  - - - roles are naturllay defined in a business context
      - roles are typically hierarchically organized
      - Seperation of Duties
        
        certain roles contradict each other
      - Chinese Wall problem
        
        "Conflict of interests"
        
        someone who accesses data of a company should not be able to access "similar" data of other companies
  - - - policies and corresponding identitites and roles exist at multiple layers
      - scalability to enterprise class organizations
  - - - privacy policy that says a patient must always be allowed to see the patients own medical record
      - access control policy says only employees of the hospital are allowd to see medical records
- - - - poor it security
      - irresponsable 3. party behaviour
    - - perceived tradeoffs between security and privacy
      - paternalistic attitude towards clients, employees, citizens
      - econmoic benefit of exploiting personal data
    - - unclear line between desired and undesired
    - - "privacy needs to be balanced with other rights"
      - prevailing public interests
        
        national security
        
        public security and safety, healthcare, law enforcements
        
        press and media
        
        science and research
  - - - right to be left alone
    - - informational self determination
    - - identifying data / linkable data
        
        Pseudonimity
        
        Aggregated data
        
        depersonalized data
  - - - data is disclosed only to authorized parties, according to a given security policy
    - - data is collected, disclosed, processed, used and disposed only according to the privacy norms of individuals and society
  - - - best practices, processes and tools fpr designing, implmenting and deploying IT systems such that they meet all privacy requirements "by design"
        
        data minimization
        
        suppoer purpose and context binding
        
        external certification
        
        pseudonimity
        
        sticky policy paradigm
    - - technology and processes for enabling an organization to handle personal data according to the agreed privacy policies
    - - technology and tools for enabling individuals to protect their personal privacy
- - - - classify, analyze
      - user access & consent
      - technical enforcements