{"id":"https://openalex.org/W2023083005","doi":"https://doi.org/10.1145/2462410.2462423","title":"Privacy promises that can be kept","display_name":"Privacy promises that can be kept","publication_year":2013,"publication_date":"2013-06-05","ids":{"openalex":"https://openalex.org/W2023083005","doi":"https://doi.org/10.1145/2462410.2462423","mag":"2023083005"},"language":"en","primary_location":{"id":"doi:10.1145/2462410.2462423","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2462410.2462423","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM symposium on Access control models and technologies","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070136662","display_name":"Omar Chowdhury","orcid":"https://orcid.org/0000-0002-1356-6279"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Omar Chowdhury","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050009335","display_name":"Andreas Gampe","orcid":null},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andreas Gampe","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103041668","display_name":"Jianwei Niu","orcid":"https://orcid.org/0000-0002-5667-3285"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jianwei Niu","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036156102","display_name":"Jeffery von Ronne","orcid":"https://orcid.org/0000-0002-6575-196X"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeffery von Ronne","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082702426","display_name":"Jared Bennatt","orcid":null},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jared Bennatt","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111177928","display_name":"Anupam Datta","orcid":"https://orcid.org/0000-0001-9520-5196"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anupam Datta","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087946116","display_name":"Limin Jia","orcid":"https://orcid.org/0000-0002-8160-349X"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Limin Jia","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031434368","display_name":"William H. Winsborough","orcid":null},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William H. Winsborough","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA","The University of Texas at San Antonio , San Antonio , TX , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"The University of Texas at San Antonio , San Antonio , TX , USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.794,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.97498055,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/health-insurance-portability-and-accountability-act","display_name":"Health Insurance Portability and Accountability Act","score":0.723554253578186},{"id":"https://openalex.org/keywords/undecidable-problem","display_name":"Undecidable problem","score":0.6122487783432007},{"id":"https://openalex.org/keywords/mandate","display_name":"Mandate","score":0.59515780210495},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5861460566520691},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.5248903036117554},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.5244798064231873},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47195473313331604},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.4473065733909607},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.4438855051994324},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.42356443405151367},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.42093777656555176},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3221731185913086},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.14242222905158997},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.14155641198158264},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.1368175446987152},{"id":"https://openalex.org/keywords/decidability","display_name":"Decidability","score":0.1239379346370697},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.0946386456489563}],"concepts":[{"id":"https://openalex.org/C2778306010","wikidata":"https://www.wikidata.org/wiki/Q606563","display_name":"Health Insurance Portability and Accountability Act","level":3,"score":0.723554253578186},{"id":"https://openalex.org/C192034797","wikidata":"https://www.wikidata.org/wiki/Q3502995","display_name":"Undecidable problem","level":3,"score":0.6122487783432007},{"id":"https://openalex.org/C2775884135","wikidata":"https://www.wikidata.org/wiki/Q845436","display_name":"Mandate","level":2,"score":0.59515780210495},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5861460566520691},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.5248903036117554},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.5244798064231873},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47195473313331604},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.4473065733909607},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.4438855051994324},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.42356443405151367},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.42093777656555176},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3221731185913086},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.14242222905158997},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.14155641198158264},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1368175446987152},{"id":"https://openalex.org/C153269930","wikidata":"https://www.wikidata.org/wiki/Q430001","display_name":"Decidability","level":2,"score":0.1239379346370697},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0946386456489563},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2462410.2462423","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2462410.2462423","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM symposium on Access control models and technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W107524893","https://openalex.org/W117556101","https://openalex.org/W120333500","https://openalex.org/W127778405","https://openalex.org/W645877529","https://openalex.org/W1428796072","https://openalex.org/W1482875841","https://openalex.org/W1499405354","https://openalex.org/W1540180001","https://openalex.org/W1565492074","https://openalex.org/W1591576077","https://openalex.org/W1612453857","https://openalex.org/W1675507648","https://openalex.org/W1740522204","https://openalex.org/W1885037678","https://openalex.org/W1903917666","https://openalex.org/W1964796077","https://openalex.org/W1984478483","https://openalex.org/W1991660936","https://openalex.org/W1999781327","https://openalex.org/W2011845647","https://openalex.org/W2023808162","https://openalex.org/W2026629052","https://openalex.org/W2045554431","https://openalex.org/W2049452590","https://openalex.org/W2051054731","https://openalex.org/W2053741629","https://openalex.org/W2063150593","https://openalex.org/W2066266646","https://openalex.org/W2096647332","https://openalex.org/W2100579696","https://openalex.org/W2105401205","https://openalex.org/W2105461974","https://openalex.org/W2107930672","https://openalex.org/W2111513652","https://openalex.org/W2115309705","https://openalex.org/W2118962824","https://openalex.org/W2121381561","https://openalex.org/W2128755207","https://openalex.org/W2129481183","https://openalex.org/W2131064738","https://openalex.org/W2132334337","https://openalex.org/W2138856440","https://openalex.org/W2154765153","https://openalex.org/W2165306422","https://openalex.org/W2166656159","https://openalex.org/W2168884369","https://openalex.org/W2293624369","https://openalex.org/W2561675875","https://openalex.org/W2914206182","https://openalex.org/W3010086459","https://openalex.org/W3108602244","https://openalex.org/W3193531217","https://openalex.org/W6639600413"],"related_works":["https://openalex.org/W4301299177","https://openalex.org/W2116878667","https://openalex.org/W2118685970","https://openalex.org/W3042284153","https://openalex.org/W4241527182","https://openalex.org/W2476957992","https://openalex.org/W1493227450","https://openalex.org/W2900699882","https://openalex.org/W2025792237","https://openalex.org/W4250923762"],"abstract_inverted_index":{"Organizations":[0],"collect":[1],"personal":[2],"information":[3,29],"from":[4],"individuals":[5],"to":[6,43,46,113,214,244,274],"carry":[7],"out":[8],"their":[9,107],"business":[10],"functions.":[11],"Federal":[12],"privacy":[13,96,149],"regulations,":[14],"such":[15,208],"as":[16,270],"the":[17,34,41,50,77,148,181,218,235,237,241,245,264,276],"Health":[18],"Insurance":[19],"Portability":[20],"and":[21,67,103,158],"Accountability":[22],"Act":[23],"(HIPAA),":[24],"mandate":[25],"how":[26],"this":[27,126],"collected":[28],"can":[30,79,87,146],"be":[31,80,88],"shared":[32],"by":[33,55,187,249],"organizations.":[35],"It":[36],"is":[37,92,100,170,175,196,205,212,220],"thus":[38],"incumbent":[39],"upon":[40],"organizations":[42],"have":[44,263],"means":[45],"check":[47,201,216],"compliance":[48,65,69,110],"with":[49,94,207,223],"applicable":[51],"regulations.":[52],"Prior":[53],"work":[54],"Barth":[56],"et.":[57],"al.":[58],"introduces":[59],"two":[60],"notions":[61],"of":[62,76,109,139,151,162,240,278],"compliance,":[63],"weak":[64],"(WC)":[66],"strong":[68],"(SC).":[70],"WC":[71,157,169,183],"ensures":[72,85],"that":[73,167,191,224,229],"present":[74,129,238],"requirements":[75,150,239,247],"policy":[78,97,131,232,242,280],"met":[81],"whereas":[82,172],"SC":[83,159,174],"also":[84,197,227],"obligations":[86],"met.":[89],"An":[90],"action":[91,195,204,219],"compliant":[93,194,206,222],"a":[95,130,136,209,231,254,271],"if":[98],"it":[99,211],"both":[101],"weakly":[102,193,221],"strongly":[104,198],"compliant.":[105,199],"However,":[106],"definitions":[108],"are":[111],"restricted":[112,137],"only":[114,215],"propositional":[115],"linear":[116],"temporal":[117,142],"logic":[118,143],"(pLTL),":[119],"which":[120,145,189],"cannot":[121],"feasibly":[122],"specify":[123,156,180],"HIPAA.":[124,152],"To":[125,200],"end,":[127],"we":[128],"specification":[132],"language":[133],"based":[134],"on":[135],"subset":[138],"first":[140],"order":[141],"(FOTL)":[144],"capture":[147],"We":[153,165,177,226,251,266],"then":[154,178,252],"formally":[155,179],"for":[160,258],"policies":[161,262],"our":[163,279],"form.":[164],"prove":[166,228],"checking":[168,173,259],"feasible":[171],"undecidable.":[176],"property":[182],"entails":[184],"SC,":[185],"denoted":[186],"\u0394,":[188],"requires":[190],"each":[192],"whether":[202,217,260],"an":[203],"policy,":[210],"sufficient":[213],"policy.":[225],"when":[230],"\u2118":[233],"has":[234],"\u0394-property,":[236],"reduce":[243],"safety":[246],"imposed":[248],"\u2118.":[250],"develop":[253],"sound,":[255],"semi-automated":[256],"technique":[257],"practical":[261],"\u0394-property.":[265],"finally":[267],"use":[268],"HIPAA":[269],"case":[272],"study":[273],"demonstrate":[275],"efficacy":[277],"analysis":[281],"technique.":[282]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}