A privacy preserving e-payment scheme

Secure electronic payment is an integral part of e-commerce. The e-payment systems in current use require the revealing of the purchaser’s payment information to the seller, while purchasers are not always happy to subject the details of their payment information to possible misuse by sellers. As a result, the uptake of e-commerce is hampered from reaching its full potential. In this paper, we propose an online payment scheme which uses the traditional e-payment infrastructure but which reveals no payment information to the seller. This is done with only an incremental increase in computational power.

Between a rock and a hard place: exploring the conflict between respecting the privacy of patients and informing their carers

Background: A patient's right to privacy is considered fundamental to medical care, with physicians assuming the role of guardian of the clinical information which is conveyed to the patient. However, as a patient's health declines, physicians are often challenged by the need to protect patient privacy while addressing the expectations of the patient's carers, who seek medical information to provide appropriate care at home.

Aims: This study sought to explore the expectations of patients, their carers and physicians regarding the communication of clinical information to carers.

Methods: Surveys were distributed in outpatient clinics at a metropolitan quaternary hospital, with responses from 102 patients and carers, as well as 219 medical staff.

Results: The expectations of patients and carers differed from those of medical staff. Physicians typically believed discussions with carers should begin following the patient's permission and at the patient's request. Patients and carers, however, believed information should be automatically offered or provided when questioned. Further, carers generally felt information updates should occur regularly and routinely, whereas physicians indicated updates should occur with prompting either by a major clinical change or in response to a carer's concern.

Conclusion: Physicians should be aware that the expectations of patients and carers regarding information communication to carers may not match their own. Meanwhile, patients and carers should be made aware of the constraints upon physicians and should be encouraged to convey their preferences for information sharing. These tasks could be facilitated by the development of a prompt sheet to assist the clinical encounter.

Modelling organisational informational privacy practices

This thesis contributes to our understanding of organisational informational privacy management practices. None of the case studies employed holistic systemic management processes; decision-making was shown to be based on a relatively narrow conception of value, was driven largely by compliance requirements, and typified by a number of boundedly rational behaviours.

A privacy preserving service broker architecture for data sharing

The problem addressed in this paper is how to ensure data privacy concerns when data is shared between multiple organisations. In domains such as healthcare, there is a need to share privacy-sensitive data among autonomous but cooperating organisations. However, security concerns and compliance to privacy regulations requiring confidentiality of the data renders unrestricted access to organisational data by others undesirable. The challenge is how to guarantee privacy preservations for the owners of the information that are willing to share information with other organisations while keeping some other information secret. Therefore, there is a need for privacy preserving database operations for querying data residing at different parties. To address this challenge, we propose a new computationally efficient framework that enables organisations to share privacy-sensitive data. The proposed framework is able to answer queries without revealing any useful information to the data sources or to the third parties.

Didaked : celebrity, privacy and player behaviour in the AFL

At the start of the 21st century elite male team sports assume a high profile presence in the commodified spaces of a globalised hyperreality. When games are sports entertainment businesses many elite performers are celebrities: they exist as brands whose every thought and action is commodified and consumed.
In these spaces the misbehaviours of a relatively small number of Australian Rules Football (AFL) players continue to make the news. A high profile recent incident involving Collingwood footballer Alan Didak is the subject of this paper. Given the levels of media attention devoted to such events we ask: Do AFL footballers have a right to privacy? We also question whether AFL players really understand what it means to be a sports celebrity.
The elevation of the sport star to the status of celebrity means that the idea that an elite performer has a private life and a public life that are separate is one that is problematic. Drawing on Foucault’s later work on the care of the self, our analysis will focus on a variety of processes which seek to develop and manage a professional identity for elite performers – and the risks that attach to these identities.

Risk management, player welfare and privacy : player development managers and dilemmas for employee relations in Australian football league clubs

This paper reports on one aspect of a research project that was funded by the Australian Football League (AFL) to explore the emergence and evolution of a ‘professional identity’ for AFL footballers. The research was informed by Foucault's later work on the care of the Self to focus on the ways in which player identities are governed by coaches, club officials, and the AFL Commission/Executive; and the manner in which players conduct themselves in ways that can be characterised as professional - or not. The paper explores the roles of Player Development Managers (PDMs) in emerging processes of risk and player management. These roles increasingly involve PDMs in risk management practices and processes that can be seen as intrusive in players’ lives. These risk management processes raise a number of concerns about player privacy and the rights of Clubs to know what their employees are up to away from the workplace.

A generic framework for three-factor authentication : preserving security and privacy in distributed systems

As part of the security within distributed systems, various services and resources need protection from unauthorized use. Remote authentication is the most commonly used method to determine the identity of a remote client. This paper investigates a systematic approach for authenticating clients by three factors, namely password, smart card, and biometrics. A generic and secure framework is proposed to upgrade two-factor authentication to three-factor authentication. The conversion not only significantly improves the information assurance at low cost but also protects client privacy in distributed systems. In addition, our framework retains several practice-friendly properties of the underlying two-factor authentication, which we believe is of independent interest.

Attack vector analysis and privacy-preserving social network data publishing

This paper addresses the problem of privacy-preserving data publishing for social network. Research on protecting the privacy of individuals and the confidentiality of data in social network has recently been receiving increasing attention. Privacy is an important issue when one wants to make use of data that involves individuals' sensitive information, especially in a time when data collection is becoming easier and sophisticated data mining techniques are becoming more efficient. In this paper, we discuss various privacy attack vectors on social networks. We present algorithms that sanitize data to make it safe for release while preserving useful information, and discuss ways of analyzing the sanitized data. This study provides a summary of the current state-of-the-art, based on which we expect to see advances in social networks data publishing for years to come.

Multimodal synthesis and the voice of the multimedia author in a Japanese EFL context

This paper examines a powerful potential of multimodal design: meaning that transcends the total semiotic contribution of a text's constituent parts. With reference to data drawn from the digital storytelling practices of Japanese university students, the author argues and demonstrates that in the current semiotic climate, characterised by the increasing availability and complexity of communication tools and ready appropriation of available designs, practices of multimedia authorship truly can evince expression that is authentically multiplicative. However, this sort of meaning making does not automatically come about. Controlling the inherent polysemy of multimodal texts, in the author's view, is a matter of recognising points of semantic correspondence among co-deployed images, language, etc. and creating syntheses of potential meaning that cut across these semiotic modes. The author further argues that it is in this way that the voice of the multimodal author can most clearly be heard, particularly in cases in which a language learner–author integrates elements within a multimedia text that encode meaning in the L2.