{"id":"https://openalex.org/W7135068056","doi":"https://doi.org/10.1109/clei67442.2025.11420618","title":"A comparative study of implementations for validating consent in personal data access control","display_name":"A comparative study of implementations for validating consent in personal data access control","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7135068056","doi":"https://doi.org/10.1109/clei67442.2025.11420618"},"language":null,"primary_location":{"id":"doi:10.1109/clei67442.2025.11420618","is_oa":false,"landing_page_url":"https://doi.org/10.1109/clei67442.2025.11420618","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 LI Latin American Computer Conference (CLEI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064624743","display_name":"Mar\u00eda Fernanda Molina","orcid":"https://orcid.org/0000-0002-7361-7058"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mar\u00eda Fernanda Molina","raw_affiliation_strings":["Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003957275","display_name":"Gustavo Betarte","orcid":"https://orcid.org/0000-0002-6863-1082"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gustavo Betarte","raw_affiliation_strings":["Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001520311","display_name":"Carlos Luna","orcid":"https://orcid.org/0000-0002-9985-5927"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Carlos Luna","raw_affiliation_strings":["Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de la República,Instituto de Computación, Facultad de Ingeniería,Montevideo,Uruguay","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83217257,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7638000249862671,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.7638000249862671,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.040800001472234726,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0284000001847744,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8133999705314636},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.6299999952316284},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.614300012588501},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5504999756813049},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.4754999876022339},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4674000144004822},{"id":"https://openalex.org/keywords/computer-access-control","display_name":"Computer access control","score":0.4650999903678894},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.45590001344680786},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.35510000586509705}],"concepts":[{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8133999705314636},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7254999876022339},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.6299999952316284},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.614300012588501},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5504999756813049},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.4754999876022339},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4674000144004822},{"id":"https://openalex.org/C44415380","wikidata":"https://www.wikidata.org/wiki/Q17008721","display_name":"Computer access control","level":3,"score":0.4650999903678894},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3846000134944916},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.34529998898506165},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3278999924659729},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.3260999917984009},{"id":"https://openalex.org/C68122502","wikidata":"https://www.wikidata.org/wiki/Q764527","display_name":"Informed consent","level":3,"score":0.32179999351501465},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.305400013923645},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.3043000102043152},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2937999963760376},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.2928999960422516},{"id":"https://openalex.org/C70000936","wikidata":"https://www.wikidata.org/wiki/Q4672467","display_name":"Access method","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C138827492","wikidata":"https://www.wikidata.org/wiki/Q6661985","display_name":"Data processing","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C2982933515","wikidata":"https://www.wikidata.org/wiki/Q104381823","display_name":"Public access","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C49895821","wikidata":"https://www.wikidata.org/wiki/Q5227368","display_name":"Data verification","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.26019999384880066},{"id":"https://openalex.org/C2777855551","wikidata":"https://www.wikidata.org/wiki/Q12310021","display_name":"Subject (documents)","level":2,"score":0.2565999925136566},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C100463513","wikidata":"https://www.wikidata.org/wiki/Q5227322","display_name":"Data model (GIS)","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/clei67442.2025.11420618","is_oa":false,"landing_page_url":"https://doi.org/10.1109/clei67442.2025.11420618","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 LI Latin American Computer Conference (CLEI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6073106527328491,"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1502907817","https://openalex.org/W1967221886","https://openalex.org/W2004929657","https://openalex.org/W2036467405","https://openalex.org/W2087834864","https://openalex.org/W2154765153","https://openalex.org/W2166602595","https://openalex.org/W2245286257","https://openalex.org/W2537124512","https://openalex.org/W2749040653","https://openalex.org/W2760886584","https://openalex.org/W4405261878"],"related_works":[],"abstract_inverted_index":{"Attribute-based":[0],"access":[1,6,11,20,97,117],"control":[2,7,12,21,98,118],"(ABAC)":[3],"and":[4,75,120],"relationship-based":[5],"(ReBAC)":[8],"are":[9],"innovative":[10],"methods":[13],"that":[14],"extend":[15],"traditional":[16],"models,":[17],"including":[18],"role-based":[19],"(RBAC).":[22],"This":[23],"paper":[24],"examines":[25],"these":[26,49],"models":[27,50],"to":[28,47,64,66,96,105],"suggest":[29],"their":[30,70,123],"application":[31],"as":[32],"a":[33,40,90,100],"means":[34],"of":[35,39,69],"verifying":[36],"the":[37,54,67],"consent":[38,65],"personal":[41],"data":[42,62,71,80,107],"subject.":[43],"The":[44],"objective":[45],"is":[46],"apply":[48],"in":[51,99],"accordance":[52],"with":[53],"General":[55],"Data":[56],"Protection":[57],"Regulation":[58],"(GDPR),":[59],"which":[60],"requires":[61],"owners":[63],"processing":[68],"for":[72,82],"defined":[73],"purposes,":[74],"ensure":[76],"users":[77],"utilize":[78],"this":[79,111],"solely":[81],"those":[83],"purposes.":[84],"To":[85],"validate":[86],"this,":[87],"we":[88,114],"explore":[89],"benchmark":[91],"proposed":[92],"by":[93],"NIST":[94],"related":[95],"hospital":[101],"setting,":[102],"modifying":[103],"it":[104],"assess":[106],"subject":[108],"consent.":[109],"From":[110],"case":[112],"study,":[113],"deployed":[115],"both":[116],"approaches":[119],"subsequently":[121],"compared":[122],"performance.":[124]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-03-13T00:00:00"}