{"id":"https://openalex.org/W7135016643","doi":"https://doi.org/10.1109/clei67442.2025.11420482","title":"Formal Specification of a Consent Model for Personal Data Access Control","display_name":"Formal Specification of a Consent Model for Personal Data Access Control","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7135016643","doi":"https://doi.org/10.1109/clei67442.2025.11420482"},"language":null,"primary_location":{"id":"doi:10.1109/clei67442.2025.11420482","is_oa":false,"landing_page_url":"https://doi.org/10.1109/clei67442.2025.11420482","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 LI Latin American Computer Conference (CLEI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128920159","display_name":"Bruno Lartigau","orcid":null},"institutions":[{"id":"https://openalex.org/I180910786","display_name":"Universidad de la Rep\u00fablica de Uruguay","ror":"https://ror.org/030bbe882","country_code":"UY","type":"education","lineage":["https://openalex.org/I180910786"]}],"countries":["UY"],"is_corresponding":false,"raw_author_name":"Bruno Lartigau","raw_affiliation_strings":["Universidad de la Rep&#x00FA;blica,Facultad de Ingenier&#x00ED;a,Montevideo,Uruguay"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de la Rep&#x00FA;blica,Facultad de Ingenier&#x00ED;a,Montevideo,Uruguay","institution_ids":["https://openalex.org/I180910786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001520311","display_name":"Carlos Luna","orcid":"https://orcid.org/0000-0002-9985-5927"},"institutions":[{"id":"https://openalex.org/I180910786","display_name":"Universidad de la Rep\u00fablica de Uruguay","ror":"https://ror.org/030bbe882","country_code":"UY","type":"education","lineage":["https://openalex.org/I180910786"]}],"countries":["UY"],"is_corresponding":false,"raw_author_name":"Carlos Luna","raw_affiliation_strings":["Universidad de la Rep&#x00FA;blica,Facultad de Ingenier&#x00ED;a,Montevideo,Uruguay"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de la Rep&#x00FA;blica,Facultad de Ingenier&#x00ED;a,Montevideo,Uruguay","institution_ids":["https://openalex.org/I180910786"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I180910786"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82224487,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7865999937057495,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7865999937057495,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.03500000014901161,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.015599999576807022,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6926000118255615},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5016999840736389},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4805000126361847},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"Personally identifiable information","score":0.45010000467300415},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.438400000333786},{"id":"https://openalex.org/keywords/informed-consent","display_name":"Informed consent","score":0.40560001134872437},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.388700008392334},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.3695000112056732},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.361299991607666}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6978999972343445},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6926000118255615},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5016999840736389},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4805000126361847},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.45010000467300415},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.438400000333786},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4090999960899353},{"id":"https://openalex.org/C68122502","wikidata":"https://www.wikidata.org/wiki/Q764527","display_name":"Informed consent","level":3,"score":0.40560001134872437},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.388700008392334},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.3695000112056732},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.361299991607666},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.35670000314712524},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.34700000286102295},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.33660000562667847},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3328000009059906},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3181999921798706},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2992999851703644},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.29100000858306885},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.28369998931884766},{"id":"https://openalex.org/C100463513","wikidata":"https://www.wikidata.org/wiki/Q5227322","display_name":"Data model (GIS)","level":2,"score":0.28220000863075256},{"id":"https://openalex.org/C2908852235","wikidata":"https://www.wikidata.org/wiki/Q764527","display_name":"Patient Consent","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.26930001378059387},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2687000036239624},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C107645828","wikidata":"https://www.wikidata.org/wiki/Q12070446","display_name":"System model","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/clei67442.2025.11420482","is_oa":false,"landing_page_url":"https://doi.org/10.1109/clei67442.2025.11420482","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 LI Latin American Computer Conference (CLEI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7996551394462585}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0,85],"2018,":[1],"as":[2,153],"part":[3],"of":[4,35,65,71,103,109,112,118,123],"an":[5],"undergraduate":[6],"thesis":[7],"project,":[8],"a":[9,95,110,154],"semi-formal":[10],"access":[11,134],"control":[12],"model":[13,24,58,91,125],"called":[14],"PCA-RBAC":[15,39,90],"(Purpose":[16],"and":[17,37,146],"Consent":[18],"/Aware":[19],"RBAC)":[20],"was":[21,40],"proposed.":[22],"This":[23],"extends":[25],"the":[26,69,86,89,101,106,124,130,141,151],"Role-Based":[27],"Access":[28],"Control":[29],"(RBAC)":[30],"paradigm":[31],"by":[32],"incorporating":[33],"notions":[34],"purpose":[36,145],"consent.":[38],"developed":[41],"based":[42],"on":[43,68],"requirements":[44,143],"drawn":[45],"from":[46],"Uruguay's":[47],"Personal":[48],"Data":[49],"Protection":[50],"Law":[51],"No.":[52],"18.331,":[53],"enacted":[54],"in":[55,94,128],"2008.":[56],"The":[57],"allows":[59],"individuals":[60],"to":[61,100,135,159],"grant":[62],"different":[63],"types":[64],"consent":[66,147],"depending":[67],"kind":[70],"data":[72],"involved,":[73],"ensuring":[74],"that":[75,133],"such":[76],"consents":[77],"are":[78,148],"respected":[79],"when":[80],"personal":[81],"information":[82,137],"is":[83,92,126,138,157],"accessed.":[84],"present":[87],"work,":[88],"specified":[93],"fully":[96],"formal":[97],"manner,":[98],"representing,":[99],"best":[102],"our":[104],"knowledge,":[105],"first":[107],"formalization":[108],"system":[111,131,152],"this":[113],"kind.":[114],"A":[115],"detailed":[116],"analysis":[117],"some":[119],"essential":[120],"security":[121],"properties":[122],"performed;":[127],"particular,":[129],"ensures":[132],"sensitive":[136],"denied":[139],"unless":[140],"necessary":[142],"regarding":[144],"met.":[149],"Specifying":[150],"state":[155],"machine":[156],"key":[158],"rigorously":[160],"analyzing":[161],"its":[162],"properties.":[163]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2026-03-13T00:00:00"}
