Interface for real-time feedback of policy views in P3P policy editor

• US 20020188627A1
• Filed: 06/08/2001
• Published: 12/12/2002
• Est. Priority Date: 06/08/2001
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Gilmore, Mark David, Presler-Marshall, Martin Joseph Clayton, Bleizeffer, Terry Michael
• Application Number:
  US09/877,536
• Publication Number:
  US 20020188627A1
• Time in Patent Office: Days
• US Class Current: 715/500
• CPC Class Codes: G06F 40/166 Editing, e.g. inserting or deleting

Abstract

A graphical user interface tool is provided to help users design privacy policies. The interface allows the user to group, manipulate, and describe the data used by a Web site. A data elements portion of the interface allows the user to view predefined data elements and to create additional data elements. The properties of the data elements may be viewed and modified. The data elements are displayed according to the hierarchical schema defined by the P3P specification. A groups portion of the interface allows the user to create groups of data elements that share common properties, such as how the recipient will use the data. A group may be populated with instances of data elements from the data elements portion of the interface. A policy portion of the interface displays descriptions of the policy in several forms. Statements in the policy are formed from the groups in the groups portion of the interface. The policy may be generated dynamically each time a group is created or a data element is added to a group or modified. A P3P policy may also contain global information, such as the name and address of the organization posting the policy. This information is presented and edited through a policy properties dialog.

Claims

1. A method for creating a privacy policy, comprising:

displaying a plurality of data elements;

generating a privacy policy based on the plurality of data elements;

modifying a first data element from the plurality of data elements; and

dynamically regenerating the privacy policy in response to the modified first data element.

2. The method of claim 1, wherein the step of modifying a first data element comprises modifying a property of the first data element.

3. The method of claim 1, wherein the step of dynamically regenerating the privacy policy comprises generating a human-readable version of the policy.

4. The method of claim 3, wherein the human-readable version of the policy comprises a hypertext markup language version of the policy.

5. The method of claim 1, wherein the step of dynamically regenerating the privacy policy comprises generating an extensible markup language version of the policy.

6. The method of claim 1, wherein the step of dynamically regenerating the privacy policy comprises generating a compact policy.

7. The method of claim 1, wherein the step of dynamically regenerating the privacy policy comprises:

identifying an error in the privacy policy; and

generating an error statement describing the error.

8. The method of claim 1, further comprising:

modifying policy-wide property; and

dynamically regenerating the privacy policy in response to the modified policy-wide property.

9. A method for creating a privacy policy, comprising:

generating a privacy policy based on the plurality of data elements;

modifying policy-wide property; and

dynamically regenerating the privacy policy in response to the modified policy-wide property.

10. The method of claim 9, wherein the step of dynamically regenerating the privacy policy comprises:

identifying an error in the privacy policy; and

generating an error statement describing the error.

11. The method of claim 9, wherein the step of dynamically regenerating the privacy policy comprises generating at least one of a human-readable version of the policy, an extensible markup language version of the policy, and a compact policy.

13. The method of claim 12, wherein the step of dynamically regenerating the privacy policy comprises:

identifying an error in the privacy policy; and

generating an error statement describing the error.

14. The method of claim 12, wherein the step of dynamically regenerating the privacy policy comprises generating at least one of a human-readable version of the policy, an extensible markup language version of the policy, and a compact policy.

16. The apparatus of claim 15, wherein the modification means comprises means for modifying a property of the first data element.

17. The apparatus of claim 15, wherein the regeneration means comprises generating a human-readable version of the policy.

18. The apparatus of claim 17, wherein the human-readable version of the policy comprises a hypertext markup language version of the policy.

19. The apparatus of claim 15, wherein the regeneration means comprises means for generating an extensible markup language version of the policy.

20. The apparatus of claim 15 wherein the regeneration means comprises means for generating a compact policy.

21. The apparatus of claim 15, wherein the regeneration means comprises:

identifying an error in the privacy policy; and

generating an error statement describing the error.

22. The apparatus of claim 15, further comprising:

means for modifying policy-wide property; and

means for dynamically regenerating the privacy policy in response to the modified policy-wide property.

24. The apparatus of claim 23, wherein the regeneration means comprises:

means for identifying an error in the privacy policy; and

means for generating an error statement describing the error.

25. The apparatus of claim 23, wherein the regeneration means comprises means for generating at least one of a human-readable version of the policy, an extensible markup language version of the policy, and a compact policy.

27. The apparatus of claim 26, wherein the regeneration means comprises:

means for identifying an error in the privacy policy; and

means for generating an error statement describing the error.

28. The apparatus of claim 26, wherein the regeneration means comprises means for generating at least one of a human-readable version of the policy, an extensible markup language version of the policy, and a compact policy.

12. A method for creating a privacy policy, comprising:

displaying at least one policy group, wherein the policy group identifies a plurality of data elements;

generating a privacy policy based on the policy group;

modifying a property of the policy group; and

dynamically regenerating the privacy policy in response to the modified property.

15. An apparatus for creating a privacy policy, comprising:

display means for displaying a plurality of data elements;

generation means for generating a privacy policy based on the plurality of data elements;

modification means for modifying a first data element from the plurality of data elements; and

regeneration means for dynamically regenerating the privacy policy in response to the modified first data element.

23. An apparatus for creating a privacy policy, comprising:

generation means for generating a privacy policy based on the plurality of data elements;

modification means for modifying policy-wide property; and

regeneration means for dynamically regenerating the privacy policy in response to the modified policy-wide property.

26. An apparatus for creating a privacy policy, comprising:

display means for displaying at least one policy group, wherein the policy group identifies a plurality of data elements;

generation means for generating a privacy policy based on the policy group;

modification means for modifying a property of the policy group; and

regeneration means for dynamically regenerating the privacy policy in response to the modified property.

29. A computer program product, in a computer readable medium, for creating a privacy policy, comprising:

instructions for displaying a plurality of data elements;

instructions for generating a privacy policy based on the plurality of data elements;

instructions for modifying a first data element from the plurality of data elements; and

instructions for dynamically regenerating the privacy policy in response to the modified first data element.

30. A computer program product, in a computer readable medium, for creating a privacy policy, comprising:

instructions for generating a privacy policy based on the plurality of data elements;

instructions for modifying policy-wide property; and

instructions for dynamically regenerating the privacy policy in response to the modified policy-wide property.

31. A computer program product, in a computer readable medium, for creating a privacy policy, comprising:

instructions for displaying at least one policy group, wherein the policy group identifies a plurality of data elements;

instructions for generating a privacy policy based on the policy group;

instructions for modifying a property of the policy group; and

instructions for dynamically regenerating the privacy policy in response to the modified property.