Usage Control Reference Monitor Architecture

It is envisioned that more and more mobile devices will be available in the future which also means that more data like location data will be available. A secure management of this kind of data is an important topic. Especially location data raises privacy questions like who is allowed to handle the location data or what can be done with the data after it was accessed. Usage control is concerned with control over data after it was released to third parties and includes requirements such as "this data must be deleted after 30 days" and "this data may be used for statistical purposes only". This paper provides a generic architecture for a reference monitor which can enforce different usage control requirements. The interaction between the individual architecture components is exemplified by one use case. The generic architecture is a first step to a system taking usage control requirements into account.