Skip to main content

2016 | OriginalPaper | Buchkapitel

Data Accountability in Socio-Technical Systems

verfasst von : Kristian Beckers, Jörg Landthaler, Florian Matthes, Alexander Pretschner, Bernhard Waltl

Erschienen in: Enterprise, Business-Process and Information Systems Modeling

Verlag: Springer International Publishing

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

Data-accountability encompasses responsibility for data and the traceability of data flows. This is becoming increasingly important for Socio-Technical Systems (STS). Determining root causes for unwanted events after their occurrence is often not possible, e.g. because of missing logs. A better traceability of root causes can be supported by the integration of accountability mechanisms at design time.
We contribute a structured method for designing an accountability architecture for STS at design time. Therefore, we propose the elicitation of accountability goals to answer why an unwanted event happened and who is responsible for it. We also identify four different interaction types in STS. Additionally, we derive accountability graphs from a generic accountability model for STS that serve as a baseline for designing accountability mechanisms for all relevant entities in an STS. The resulting architecture is adjusted to legal requirements, regulations and contracts. We demonstrate the applicability of our approach with an eHealth case study.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Fußnoten
1
Network of Excellence on Engineering Secure Future Internet Software Services and Systems (NESSoS), http://​www.​nessos-project.​eu, last access on 03/23/2016.
 
2
Note: We will address the inclusion of further laws and resolving conflicts between them in the future and focus in this paper exclusively on the BDSG.
 
Literatur
1.
Zurück zum Zitat Trist, E.L.: The evolution of socio-technical systems : a conceptual framework and an action research program. Ontario Quality of Working Life Centre On cover: Issues in the quality of working life : a series of occasional papers, no. 2 (1981) Trist, E.L.: The evolution of socio-technical systems : a conceptual framework and an action research program. Ontario Quality of Working Life Centre On cover: Issues in the quality of working life : a series of occasional papers, no. 2 (1981)
2.
Zurück zum Zitat Bonazzi, R., Hussami, L., Pigneur, Y.: Compliance management is becoming a major issue in is design. In: Information Systems: People, Organizations, Institutions, and Technologies: ItAIS: The Italian Association for Information Systems, pp. 391–398. Physica-Verlag HD, Heidelberg (2010) Bonazzi, R., Hussami, L., Pigneur, Y.: Compliance management is becoming a major issue in is design. In: Information Systems: People, Organizations, Institutions, and Technologies: ItAIS: The Italian Association for Information Systems, pp. 391–398. Physica-Verlag HD, Heidelberg (2010)
3.
Zurück zum Zitat Feigenbaum, J., Jaggard, A.D., Wright, R.N.: Towards a formal model of accountability. In: Proceedings of the 2011 Workshop on New Security Paradigms Workshop, NSPW 2011, pp. 45–56. ACM, New York (2011) Feigenbaum, J., Jaggard, A.D., Wright, R.N.: Towards a formal model of accountability. In: Proceedings of the 2011 Workshop on New Security Paradigms Workshop, NSPW 2011, pp. 45–56. ACM, New York (2011)
4.
Zurück zum Zitat Weitzner, D.J., Abelson, H., Berners-Lee, T., Feigenbaum, J., Hendler, J., Sussman, G.J.: Information accountability. Commun. ACM 51(6), 82–87 (2008)CrossRef Weitzner, D.J., Abelson, H., Berners-Lee, T., Feigenbaum, J., Hendler, J., Sussman, G.J.: Information accountability. Commun. ACM 51(6), 82–87 (2008)CrossRef
5.
Zurück zum Zitat Banks, D.L.: The health insurance portability and accountability act: does it live up to the promise? J. Med. Syst. 30(1), 45–50 (2006)CrossRef Banks, D.L.: The health insurance portability and accountability act: does it live up to the promise? J. Med. Syst. 30(1), 45–50 (2006)CrossRef
6.
Zurück zum Zitat Weill, P., Ross, J.: IT Governance: How Top Performers Manage IT Decision Rights for Superior Results. Harvard Business School Press, Boston (2004) Weill, P., Ross, J.: IT Governance: How Top Performers Manage IT Decision Rights for Superior Results. Harvard Business School Press, Boston (2004)
7.
Zurück zum Zitat Khatri, V., Brown, C.V.: Designing data governance. Commun. ACM 53(1), 148–152 (2010)CrossRef Khatri, V., Brown, C.V.: Designing data governance. Commun. ACM 53(1), 148–152 (2010)CrossRef
8.
Zurück zum Zitat Buneman, P., Khanna, S., Tan, W.-C.: Why and where: a characterization of data provenance. In: Van den Bussche, J., Vianu, V. (eds.) ICDT 2001. LNCS, vol. 1973, pp. 316–330. Springer, Heidelberg (2000)CrossRef Buneman, P., Khanna, S., Tan, W.-C.: Why and where: a characterization of data provenance. In: Van den Bussche, J., Vianu, V. (eds.) ICDT 2001. LNCS, vol. 1973, pp. 316–330. Springer, Heidelberg (2000)CrossRef
9.
Zurück zum Zitat Bechtold, S., Perrig, A.: Accountability in future internet architectures. Commun. ACM 57(9), 21–23 (2014)CrossRef Bechtold, S., Perrig, A.: Accountability in future internet architectures. Commun. ACM 57(9), 21–23 (2014)CrossRef
10.
Zurück zum Zitat Gössler, G., Le Métayer, D.: A general trace-based framework of logical causality. In: Fiadeiro, J.L., Liu, Z., Xue, J. (eds.) FACS 2013. LNCS, vol. 8348, pp. 157–173. Springer, Heidelberg (2014) Gössler, G., Le Métayer, D.: A general trace-based framework of logical causality. In: Fiadeiro, J.L., Liu, Z., Xue, J. (eds.) FACS 2013. LNCS, vol. 8348, pp. 157–173. Springer, Heidelberg (2014)
11.
Zurück zum Zitat Halpern, J.Y., Pearl, J.: Causes and explanations: a structural-model approach – part 1: Causes. CoRR abs/1301.2275 (2013) Halpern, J.Y., Pearl, J.: Causes and explanations: a structural-model approach – part 1: Causes. CoRR abs/1301.2275 (2013)
12.
Zurück zum Zitat Eriksén, S.: Designing for accountability. In: NordiCHI 2002: Proceedings of the Second Nordic Conference on Human-Computer Interaction, pp. 177–186. ACM, New York (2002) Eriksén, S.: Designing for accountability. In: NordiCHI 2002: Proceedings of the Second Nordic Conference on Human-Computer Interaction, pp. 177–186. ACM, New York (2002)
13.
Zurück zum Zitat Gajanayake, R., Iannella, R., Sahama, T.: Sharing with care: an information accountability perspective. IEEE Internet Comput. 15(4), 31–38 (2011)CrossRef Gajanayake, R., Iannella, R., Sahama, T.: Sharing with care: an information accountability perspective. IEEE Internet Comput. 15(4), 31–38 (2011)CrossRef
14.
Zurück zum Zitat Gajanayake, R., Sahama, T., Iannella, R.: Principles of information accountability: an ehealth perspective. Int. J. E-Health Med. Commun. 5(3), 40–57 (2014)CrossRef Gajanayake, R., Sahama, T., Iannella, R.: Principles of information accountability: an ehealth perspective. Int. J. E-Health Med. Commun. 5(3), 40–57 (2014)CrossRef
15.
Zurück zum Zitat Lankhorst, M.: Enterprise Architecture at Work: Modelling, Communication, and Analysis, 1st edn. Springer-Verlag New York Inc., New York (2005) Lankhorst, M.: Enterprise Architecture at Work: Modelling, Communication, and Analysis, 1st edn. Springer-Verlag New York Inc., New York (2005)
16.
Zurück zum Zitat Jonkers, H., Lankhorst, M., Buuren, R.V., Bonsangue, M., Torre, L.V.D.: Concepts for modeling enterprise architectures. Int. J. Coop. Inf. Syst. 13, 257–287 (2004)CrossRef Jonkers, H., Lankhorst, M., Buuren, R.V., Bonsangue, M., Torre, L.V.D.: Concepts for modeling enterprise architectures. Int. J. Coop. Inf. Syst. 13, 257–287 (2004)CrossRef
17.
Zurück zum Zitat Waltl, B., Reschenhofer, T., Matthes, F.: Data governance on ea information assets: logical reasoning for derived data. In: Persson, A., Stirna, J. (eds.) CAiSE 2015 Workshops. LNBIP, vol. 215, pp. 401–412. Springer, Heidelberg (2015)CrossRef Waltl, B., Reschenhofer, T., Matthes, F.: Data governance on ea information assets: logical reasoning for derived data. In: Persson, A., Stirna, J. (eds.) CAiSE 2015 Workshops. LNBIP, vol. 215, pp. 401–412. Springer, Heidelberg (2015)CrossRef
Metadaten
Titel
Data Accountability in Socio-Technical Systems
verfasst von
Kristian Beckers
Jörg Landthaler
Florian Matthes
Alexander Pretschner
Bernhard Waltl
Copyright-Jahr
2016
DOI
https://doi.org/10.1007/978-3-319-39429-9_21