关键词: 基于目的访问控制（PBAC）, 隐私保护, 期望目的, 期望信誉度

Abstract: The key problem of Web service privacy protection is to ensure the protection of the user's privacy information under the premise of meeting the user's functional requirements. Considering the traditional access control model cannot describe the purpose of using the data and the reputation of the requester, and the data user must be specified in a policy, this paper proposes a privacy preserving access control model based on intended purpose and reputation labeling. Firstly, this paper analyzes the purpose based access control model, and defines the privacy infor-mation set, the purpose and the hierarchical relationship. Secondly, this paper gives the principle and steps of the privacy information set labeling, extends the XACML (extensible access control markup language) standard component, and gives the analysis algorithm in the privacy policy execution system. Finally, the experimental results demonstrate the feasibility and effectiveness of the proposed model.

Key words: purpose based access control (PBAC), privacy protection, intended purpose, intended reputation