Enforcing location privacy policies through an AOP-based reference monitor

Location based services have become more and more popular over the last years and allow the tracking of persons and goods. User of these services often have little control over their private data as it is accessed, processed and stored. This paper presents a privacy enforcement concept that combines a sticky-policy approach with an aspect-oriented programming based reference monitor. We demonstrate the feasibility and ease-of-use of our concept with the example of a theme-park location service.