Dynamic aspects of the InfoPriv model for information privacy

This paper describes the dynamic aspects of the InfoPriv model for privacy. The dynamic aspects are concerned with the actual information flow as well as the change of the privacy policy over time. An information can-flow graph represents the potential information flow between entities, thereby describing only the static aspects of InfoPriv. The dynamic aspects are divided into two categories: dynamic information flow and the evolution of the static aspects. "Dynamic information flow" refers to the simulation of the actual information flow as it occurs over time. Information flow is, therefore, permitted or denied based on the past information flow of a system. The "evolution of the static aspects" refers to the change of the privacy policy over time. For instance, it is necessary to give entities access to more information during their lifetime. An algorithm is presented that extends the can-flow graph without introducing unauthorised information flow.