Extending P3P/Appel for Friend Finder

Abstract

FriendFinder as a location-based service collects location data from mobile users and distributes a particular user's location upon request. Privacy of users data especially location data needs to be guaranteed according to both user and legacy perspectives. W3C's privacy recommendation for internet platform P3P/Appel only considers the privacy relations between the users and the service providers. In this paper, we explain the shortcomings of P3P/Appel for providing privacy in FriendFinder and propose enhancements to the P3P/Appel policy languages.