Minimising disclosure of client information in credential-based interactions

The advancements in ICT allow people to use and access resources and services on the web anywhere and anytime. Servers offering resources typically require users to release information about them, which is then used to enforce possible access policies on the offered services. Effective access to such resources requires the development of approaches for enabling the user to organise and manage all her credentials and regulate their release when interacting with other parties over the web. In this paper, we provide a means for the user to specify how much she values the release of different properties, credentials, or combinations thereof as well as additional constraints that she might impose on information disclosure. Exploiting a graph modelling of the problem, the user can determine the credentials and properties to disclose to satisfy a server request while minimising the sensitivity of the information disclosed. We develop a heuristic approach that shows execution times compatible with the requirements of interactive access to web resources.