A Semantic based Privacy Framework for Web Services

There are some key considerations in developing a privacy mechanism such as revealing only the minimal pertinent information about the user, not to overwhelm the users while declaring their privacy preferences and requiring no or only limited user interaction. In this paper, with these considerations in mind, we present a privacy framework for Web services which allow user agents to automatically negotiate with Web services on the amount of personal information to be disclosed on behalf of the user. We propose that Web services declare their input parameters as Mandatory or Optional and allow users to declare how much of their personal information can be made available to the services. The users specify their privacy preferences in different permission levels on the basis of a domain specific service ontology based on DAML-S. The major components of the system are a globally accessible context server which stores user preferences and a service registry where the services advertised and the service semantics are available.