Method for creating and verifying a privacy policy from a process model, and corresponding computing device and computer program element

(19)

(11)

EP 1 675 047 A8

(12)	CORRECTED EUROPEAN PATENT APPLICATION
	Note: Bibliography reflects the latest situation

(15)	Correction information:
	Corrected version no 1 (W1 A1)

(48)	Corrigendum issued on:
	11.10.2006 Bulletin 2006/41

(43)	Date of publication:
	28.06.2006 Bulletin 2006/26

(21)	Application number: 04030759.7

(22)	Date of filing: 24.12.2004

(51)

International Patent Classification (IPC):

G06Q 10/00^(2006.01)

(84)	Designated Contracting States:
	AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR
	Designated Extension States:
	AL BA HR LV MK YU

(71)	Applicant: International Business Machines Corporation
	Armonk, N.Y. 10504 (US)

(72)	Inventors:
	Backes, Michael CH-8800 Thalwil (CH) Karjoth, Guenter CH-8820 Waedenswil (CH) Pfitzmann, Birgit M. CH-8833 Samstagern (CH) Schunter, Matthias CH-8003 Zurich (CH) Waidner, Michael P. CH-8804 Au (CH)

(74)	Representative: Toleti, Martin
	IBM Research GmbH Zurich Research Laboratory Säumerstrasse 4 / Postfach 8803 Rüschlikon 8803 Rüschlikon (CH)

(54)	Method for creating and verifying a privacy policy from a process model, and corresponding computing device and computer program element

(57) The method for creating a privacy policy from a process model according to the invention comprises the following steps. First, a task (T1 - T11) from the process model is chosen. Then one or more of the elements role, data, purpose, action, obligation, and condition are gathered from the task and a rule is build up by means of these elements. Finally the rule is added to the privacy policy.