SYSTEM IMPLICATIONS OF INFORMATION PRIVACY,
Abstract
Various questions of providing information privacy for remotely accessible on-line, time-shared information systems are explored. Such systems, especially the remote terminals and the communication network, are vulnerable to threats to privacy ranging from accidental dumping of information as a result of hardware or software failures to deliberate penetration using sophisticated equipment. Deliberate attacks are to be expected since payoff from obtained, altered, or erased information could be high. The resources required vary from the cost of a tape recorder to a large investment in equipment and know-how. The protective techniques discussed in this paper include: shielding to reduce electro-magnetic emanations; use of once-only passwords for access control; application of privacy transformations to conceal information in user-processor communications and in data files; recording of attempted penetrations; and systematic verification of the hardware and software integrity. It appears possible to engineer various privacy protection techniques into information systems so that the cost of protection is proportional to the amount received, and is borne largely by those users who desire privacy for their communications and/or files. (Author)
Document Details
- Document Type
- Technical Report
- Publication Date
- Apr 01, 1967
- Accession Number
- AD0650847
Entities
People
- H. E. Petersen
- R. Turn
Organizations
- RAND Corporation