@article { ISI:000389146000005,
	title = {RESOLVING CONFLICTING PRIVACY POLICIES IN M-HEALTH BASED ON PRIORITIZATION},
	journal = {Scalable Computing-Practice and Experience},
	volume = {17},
	number = {3, SI},
	year = {2016},
	month = {SEP},
	pages = {207-226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts.},
	issn = {1895-1767},
	doi = {10.12694/scpe.v17i3.1181},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@article {11714990220160901,
	title = {RESOLVING CONFLICTING PRIVACY POLICIES IN M-HEALTH BASED ON PRIORITIZATION.},
	journal = {Scalable Computing: Practice \& Experience},
	volume = {17},
	number = {3},
	year = {2016},
	pages = {207 - 226},
	abstract = {Mobile health has recently gained a lot of attention. Biological, environmental and behavioral data collected from mobile devices can be analyzed and transmitted directly to the person, family or health professionals for immediate and individualized care. However, due to multiplicity of mobile applications and the heterogeneity of actors involved in patient{\textquoteright}s care, conflicts among the privacy policies defined by the different actors can take place. Thus, we present in this paper an approach to resolve the problem of conflicting privacy policies in e-health/m-health environments using AHP (Analytic Hierarchy Process) prioritization technique. Conflicts detection and resolution are facilitated by the adoption of S4P formal privacy policy language used as a standardized language. Finally, a case study is suggested to illustrate how our solution can be applied to resolve such conflicts. [ABSTRACT FROM AUTHOR]},
	keywords = {AHP, Conflicting policies, Data security, Medical policy, Privacy policy, Privacy preference, S4P, Wireless communication systems in medical care},
	issn = {18951767},
	url = {http://search.ebscohost.com/login.aspx?direct=true\&db=iih\&AN=117149902\&site=ehost-live},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000380407100022,
	title = {An approach for privacy policies negotiation in mobile health-Cloud environments},
	booktitle = {2015 INTERNATIONAL CONFERENCE ON CLOUD TECHNOLOGIES AND APPLICATIONS (CLOUDTECH 15)},
	year = {2015},
	note = {International Conference on Cloud Computing Technologies and Applications (CloudTech), Marrakech, MOROCCO, JUN 02-04, 2015},
	pages = {179-184},
	abstract = {Mobile technologies continue to improve patients{\textquoteright} quality of care. Particularly, with the emergence of Cloud-based mobile services and applications, patients can easily communicate with their physicians and receive the care they deserve. However, due to the increased number of privacy threats in mobile and Cloud computing environments, maximizing patients{\textquoteright} control over their data becomes a necessity. Thus, formal languages to express their privacy preferences are needed. Besides, because of the diversity of actors involved in patient{\textquoteright}s care, conflict among privacy policies can take place. In this paper, we present an approach that aims to resolve the problem of conflicting privacy policies based on a Security Policy Negotiation Framework. The major particularity of our solution is that it considers the patient to be a crucial actor in the negotiation process. The different steps of our approach are illustrated through an example of three conflicting privacy policies with different privacy languages.},
	isbn = {978-1-4673-8149-9},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000380450300019,
	title = {Towards negotiable privacy policies in Mobile Healthcare},
	booktitle = {FIFTH INTERNATIONAL CONFERENCE ON THE INNOVATIVE COMPUTING TECHNOLOGY (INTECH 2015)},
	year = {2015},
	note = {International Conference on the Innovative Computing Technology (INTECH), Galicia, SPAIN, MAY 20-22, 2015},
	pages = {94-99},
	abstract = {With the increased use of mobile technologies in the health sector, patients are more and more concerned about their privacy protection. Particularly, due to the diversity of actors (physicians, healthcare organizations, Cloud providers.) and the heterogeneity of privacy policies defined by each actor, conflicts among these policies may occur. We believe that negotiation is one of the best techniques for resolving the issue of conflicting privacy policies. From this perspective, we present an approach and algorithm to negotiate privacy policies based on an extension of the bargaining model. Besides, in order to show how our solution can be applied, we present an example of conflicting privacy policies expressed using S4P, a generic language for specifying privacy preferences and policies.},
	isbn = {978-1-4673-7551-1},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000380428300031,
	title = {PPAMH: A Novel Privacy-Preserving Approach for Mobile Healthcare},
	booktitle = {2014 9TH INTERNATIONAL CONFERENCE FOR INTERNET TECHNOLOGY AND SECURED TRANSACTIONS (ICITST)},
	year = {2014},
	note = {International Conference for Internet Technology and Secured Transactions{*}, London, ENGLAND, DEC 08-10, 2014},
	pages = {209-214},
	abstract = {Mobile technologies are transforming the way providers and patients communicate. Thanks to mobile devices such as smartphones, tablets and patient monitoring devices, real time patient information is easily provided to physicians; patients are integrated in managing their own health by measuring their blood pressure, exercise and food diaries, setting reminders on when to take medicines and so on. However, although mobile healthcare offers many benefits, there is also a downside to using these mobile technologies. Privacy is among the primary issues to address. In effect, Patients{\textquoteright} sensitive medical data can be exchanged between different parties including physicians, patients with the same diseases, laboratories, pharmacies. Furthermore, since mobile devices are not only used for healthcare purposes, new privacy breaches may occur. Thus, patients become very concerned about {\textquoteleft}{\textquoteleft}what happen{{\textquoteright}{\textquoteright}} to their data. In this paper, we present a Privacy-Preserving Approach for Mobile Healthcare named PPIAMH. The proposed solution allows patients to control the disclosure of their sensitive medical data while using their mobile devices based on an intelligent mobile application which predict their privacy preferences easily.},
	isbn = {978-1-908320-39-1},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
@conference { ISI:000366999600120,
	title = {Towards controlled-privacy in e-health: A comparative study},
	booktitle = {2014 INTERNATIONAL CONFERENCE ON MULTIMEDIA COMPUTING AND SYSTEMS (ICMCS)},
	year = {2014},
	note = {International Conference on Multimedia Computing and Systems (ICMCS), Marrakech, MOROCCO, APR 14-16, 2014},
	pages = {680-685},
	abstract = {Technological advances in electronic services have made it easier than ever before to access and share different kinds of data. In the healthcare sector, the exchange of patients{\textquoteright} information between different actors (hospitals, laboratories, pharmacies...) improves diagnosis and treatment quality and reduces related costs. However, this exchange arise new security concerns and makes patient information subject to privacy breaches. In the literature, several privacy-preserving approaches have been proposed, most of which focus on protecting private data using cryptographic, access control or anonymitization techniques. Thus, the patient becomes a passive actor regarding the disclosure of his personal information. In this paper we consider the following question: should patients only rely on third parties to protect their sensitive data or shall they be granted some kind of control to select the level of privacy and security they want? In this context, we propose a comparative study of some recent work in the area of e-services privacy. The analysis of this study shows that data privacy is not fairly user controlled particularly in the health sector.},
	isbn = {978-1-4799-3824-7},
	author = {Sadki, Souad and El Bakkali, Hanan}
}
