{"id":"https://openalex.org/W7130744901","doi":"https://doi.org/10.48550/arxiv.2602.17413","title":"DAVE: A Policy-Enforcing LLM Spokesperson for Secure Multi-Document Data Sharing","display_name":"DAVE: A Policy-Enforcing LLM Spokesperson for Secure Multi-Document Data Sharing","publication_year":2026,"publication_date":"2026-02-19","ids":{"openalex":"https://openalex.org/W7130744901","doi":"https://doi.org/10.48550/arxiv.2602.17413"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2602.17413","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2602.17413","pdf_url":"https://arxiv.org/pdf/2602.17413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2602.17413","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126490577","display_name":"Ren\u00e9 Brinkhege","orcid":"https://orcid.org/0009-0006-8055-0580","observed_orcids":["https://orcid.org/0009-0006-8055-0580"]},"institutions":[{"id":"https://openalex.org/I4210163630","display_name":"Fraunhofer Institute for Software and Systems Engineering","ror":"https://ror.org/058kjq542","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210163630","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Brinkhege, Ren\u00e9","raw_affiliation_strings":["Fraunhofer ISST Dortmund , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer ISST Dortmund , Germany","institution_ids":["https://openalex.org/I4210163630"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112512270","display_name":"Prahlad Menon","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Menon, Prahlad","raw_affiliation_strings":["Fraunhofer CMA Riverdale Park , MD , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer CMA Riverdale Park , MD , USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6923999786376953,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6923999786376953,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2280000001192093,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.022700000554323196,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-disclosure","display_name":"information disclosure","score":0.6200000047683716},{"id":"https://openalex.org/keywords/secure-information-flow","display_name":"information flow security","score":0.8769999742507935},{"id":"https://openalex.org/keywords/usage-control","display_name":"usage control","score":0.9049999713897705},{"id":"https://openalex.org/keywords/query-routing","display_name":"query routing","score":0.40799999237060547}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8108000159263611},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5145999789237976},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.48240000009536743},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.44029998779296875},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.42329999804496765},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4058000147342682},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39649999141693115},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.39160001277923584},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.3840999901294708},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.36660000681877136},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3582000136375427},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3310999870300293},{"id":"https://openalex.org/C2776854237","wikidata":"https://www.wikidata.org/wiki/Q6031064","display_name":"Information sharing","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.32600000500679016},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.32120001316070557},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C8797682","wikidata":"https://www.wikidata.org/wiki/Q2115","display_name":"XML","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.27000001072883606},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C2778505590","wikidata":"https://www.wikidata.org/wiki/Q141022","display_name":"Eclipse","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2547999918460846}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2602.17413","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2602.17413","pdf_url":"https://arxiv.org/pdf/2602.17413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2602.17413","doi":"https://doi.org/10.48550/arxiv.2602.17413","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.17413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2602.17413","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2602.17413","pdf_url":"https://arxiv.org/pdf/2602.17413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5473999977111816}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7130744901.pdf","grobid_xml":"https://content.openalex.org/works/W7130744901.grobid-xml"},"referenced_works_count":1,"referenced_works":["https://openalex.org/W4406490385"],"related_works":["https://openalex.org/W7169630030","https://openalex.org/W7221799058","https://openalex.org/W7160537430","https://openalex.org/W7101940647","https://openalex.org/W7166817984","https://openalex.org/W7202270335","https://openalex.org/W79193439","https://openalex.org/W6948008254","https://openalex.org/W7222834975","https://openalex.org/W4388405772"],"abstract_inverted_index":{"In":[0],"current":[1],"inter-organizational":[2],"data":[3,79,218],"spaces,":[4],"usage":[5,65,98,110],"policies":[6,57],"are":[7,30,94,157],"enforced":[8],"mainly":[9],"at":[10,123],"the":[11,85,182],"asset":[12],"level:":[13],"a":[14,28,64,78,88,137,160,205],"whole":[15],"document":[16,29,167],"or":[17,22,58,179],"dataset":[18],"is":[19,49,171],"either":[20],"shared":[21],"withheld.":[23],"When":[24],"only":[25],"parts":[26],"of":[27,77,82,164],"sensitive,":[31],"providers":[32],"who":[33],"want":[34],"to":[35,54,192,216],"avoid":[36],"leaking":[37],"protected":[38],"information":[39,103,113,122],"typically":[40],"must":[41],"manually":[42],"redact":[43],"documents":[44,74],"before":[45],"sharing":[46],"them,":[47],"which":[48,154],"costly,":[50],"coarse-grained,":[51],"and":[52,112,116,143,146,196,201],"hard":[53],"maintain":[55],"as":[56,204],"partners":[59],"change.":[60],"We":[61,100,130,186],"present":[62],"DAVE,":[63],"policy-enforcing":[66],"LLM":[67,214],"spokesperson":[68,138,161],"that":[69],"answers":[70],"questions":[71],"over":[72],"private":[73],"on":[75,109,211],"behalf":[76],"provider.":[80],"Instead":[81],"releasing":[83],"documents,":[84],"provider":[86],"exposes":[87],"natural":[89],"language":[90],"interface":[91],"whose":[92],"responses":[93],"constrained":[95],"by":[96],"machine-readable":[97],"policies.":[99],"formalize":[101],"policy-violating":[102],"disclosure":[104],"in":[105,153],"this":[106],"setting,":[107],"drawing":[108],"control":[111],"flow":[114],"security,":[115,194],"introduce":[117],"virtual":[118],"redaction:":[119],"suppressing":[120],"sensitive":[121],"query":[124],"time":[125],"without":[126],"modifying":[127],"source":[128],"documents.":[129],"describe":[131],"an":[132,148,189],"architecture":[133],"for":[134,207],"integrating":[135],"such":[136],"with":[139],"Eclipse":[140],"Dataspace":[141],"Components":[142],"ODRL-style":[144],"policies,":[145],"outline":[147,188],"initial":[149],"provider-side":[150],"integration":[151],"prototype":[152],"QA":[155],"requests":[156],"routed":[158],"through":[159],"service":[162],"instead":[163],"triggering":[165],"raw":[166],"transfer.":[168],"Our":[169],"contribution":[170],"primarily":[172],"architectural:":[173],"we":[174],"do":[175],"not":[176],"yet":[177],"implement":[178],"empirically":[180],"evaluate":[181],"full":[183],"enforcement":[184],"pipeline.":[185],"therefore":[187],"evaluation":[190],"methodology":[191],"assess":[193],"utility,":[195],"performance":[197],"trade-offs":[198],"under":[199],"benign":[200],"adversarial":[202],"querying":[203],"basis":[206],"future":[208],"empirical":[209],"work":[210],"systematically":[212],"governed":[213],"access":[215],"multi-party":[217],"spaces.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2026-02-21T00:00:00"}