Privacy and Security in Personal Information Databank Systems.
Technical aspects of implementing information privacy safeguards and data security mechanisms in personal information databanks are explored. A structural classification of databank systems is presented; relevant characteristics of personal information are identified; a sensitivity scale and a classification system for personal information are proposed; and the general nature and sources of threats against databank systems are examined. A game-theoretic framework is provided for the protection requirements analysis and protection systems design. The associated variables, such as value of information, protection effectiveness, and protection cost, are discussed. The report concludes with an analysis of the components of a total protective system for personal information databanks--the subjects' rights protection provisions, maintenance of confidentiality, data security, integrity management, and auditing. Representative protection systems are derived for three levels of protection. 121 pp. Ref.