Security Analysis and Legal Compliance Checking for the Design of Privacy-friendly Information Systems

Nowadays, most of business practices involve personal data-processing of customers and employees. This is strictly regulated by legislation to protect the rights of the data subject. Enforcing regulation into enterprise information system is a non-trivial task that requires an interdisciplinary approach. This paper presents a declarative framework to support the specification of information system designs, purpose-aware access control policies, and the legal requirements derived from the European Data Protection Directive. This allows for compliance checking via a reduction to policy refinement that is supported by available automated tools. We briefly discuss the results of the compliance analysis with a prototype tool on a simple but realistic scenario about the processing of personal data to produce salary slips of employees in an Italian organization

Integrating blockchain and microgrid technology to enable peer-to-peer energy trading: a business process model

Traditional centralised energy systems are coming under increasing pressure because of decarbonisation, decentralisation, and digitisation. A lack of energy security and the inability to manage bi-directional electricity flows constitute two of the biggest challenges faced by centralised systems. Furthermore, in South Africa, the country’s energy system remains monopolised with one large utility satisfying most of the country’s electricity demand. This study is motivated by the need to address energy security within such a monopolised market. To redress the problems highlighted above, this study explores how blockchain and microgrid technology can be integrated to enable decentralised energy production and trading in South Africa. As such, this study develops a fully integrated blockchain-based microgrid energy trading system model. The functional requirements of the system are presented in the form of a business process model. Amongst other benefits, an active blockchain-based microgrid energy trading system provides a means to bolster energy security for the systems’ users. A unique aspect of this study’s approach to energy trading is the utilisation of blockchain’s native tokenizing capabilities. Prosumer energy tokens are minted to create a digital currency for local peer-to-peer energy exchange. A commons-rule based approach is adopted for governing energy resources. As such, this study demonstrates that commons-based solutions provide a feasible alternative to market and profit driven trading for organizing local energy exchange. The primary deliverable of this study satisfies the request of various blockchain researchers for blockchain research to focus on holistic conceptualisations, rather than on the minutiae of blockchain technicalities. Eight core functional requirements of a blockchain energy trading system were identified prior to the construction of the process model. The functional requirements were elicited during a scoping review as a part of the secondary data collection process. Expert review was utilised to verify the functional requirements of the blockchain energy trading system. Once the experts were identified, each expert completed a questionnaire with the intention to verify the requirements. The above process constituted the expert review process for the study. Additionally, the syntactic correctness of the business process model was verified by a business process modelling expert. Weber’s Theory of Evaluation constitutes the theoretical underpinning for the evaluation of the system parts. This study contributes the first publicly accessible business process models of a blockchain-based microgrid energy trading system. This study seeks to advance the discussion of a more integrative and cross disciplinary approach concerning blockchain research, particularly as it pertains to microgrid energy trading.Thesis (MCom) -- Faculty of Commerce, Department of Information Systems, 202