Title: PRIVACY-AWARE BUSINESS PROCESS DESIGN AND IDENTITY MANAGEMENT

Privacy-aware Business Process Design and Identity Management

Inventing privacy in business processes is the aim of this chapter. A general approach is presented by the Enterprise Privacy Architecture in order to identify business processes which make use of customers’ personal data or attributes and to implement privacy regulations via privacy policies in an information system of a service provider. One suggestion towards a data protection certification is presented by section 5.2. Section 5.2 proposes to apply process models for security in information and communication security for data protection. Section 5.3 investigates on current identity management system whether they preserve informational self-determination in single-stage and multi-stage business processes. The security properties of current identity management systems concerning disclosure of personal data and the security requirements for a self-determined use of disclosed personal data are introduced in section 5.4.  Section 5.5 summarises the results of this chapter.