A Data Sharing Agreement Framework

• Published in: Information Systems Security pp. 22 - 36
• Main Authors: Swarup, Vipin, Seligman, Len, Rosenthal, Arnon
• Format: Book Chapter Conference Proceeding
• Language: English
• Published: Berlin, Heidelberg Springer Berlin Heidelberg 2006; Springer
• Series: Lecture Notes in Computer Science
• Subjects: Access Control Policy; Applied sciences; Computer science; control theory; systems; Computer systems and distributed systems. User interface; Data Resource; Deontic Logic; Exact sciences and technology; Information systems. Data bases; Logistics; Memory and file management (including protection and security); Memory organisation. Data processing; Operational research and scientific management; Operational research. Management science; Policy Language; Service Level Agreement; Software; Specification language; Pipe flow; Information system; Modeling; Temporal logic; Data flow; Data flow processing; Consumer; Supplier; Added value; Resource management; Shared memory; Computer security; Logistics
• ISBN: 3540689621; 9783540689621
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/11961635_2

When consumers build value-added services on top of data resources they do not control, they need to manage their information supply chains to ensure that their data suppliers produce and supply required data as needed. Producers also need to manage their information supply chains to ensure that their data is disseminated and protected appropriately. In this paper, we present a framework for data sharing agreements (DSA) that supports a wide variety of data sharing policies. A DSA is modeled as a set of obligation constraints expressed over a dataflow graph whose nodes are principals with local stores and whose edges are (typed) channels along which data flows. We present a specification language for DSAs in which obligations are expressed as distributed temporal logic (DTL) predicates over data resources, dataflow events, and datastore events. We illustrate the use of our framework via a case study based on a real-world data sharing agreement and discuss issues related to the analysis and compliance of agreements.