Privacy Access Control Model with Location Constraints for XML Services

Information privacy is usually concerned with the confidentiality of personal identifiable information (PII), such as electronic medical records. Nowadays XML services are used to support different applications which may contain of PII, such as healthcare applications. Thus, the information access control mechanism for XML services must be embedded with privacy-enhancing technologies. Role-based access control (RBAC) model has been widely investigated and applied into various applications for a period of time. This paper focuses on research issues of location constraints in privacy access control. This paper presents an extended framework of RBAC with privacy-based extensions with location constraints to tackle such a need. This paper also investigates XML technologies, such as extensible access control markup language (XACML) and WS-policy constraints for implementing the proposed model.