Accountable Systems: Fusion Center Prototype
description
Transcript of Accountable Systems: Fusion Center Prototype
![Page 1: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/1.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
1
Accountable Systems:Fusion Center Prototype
Spring 2010
![Page 2: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/2.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
2
About DIG
The Decentralized Information Group explores technical, institutional, and public policy questions necessary to advance the development of global, decentralized information environments.
![Page 3: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/3.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
3
Agenda• Challenge of Accountability• Prototyping Fusion Center information sharing• Scenarios
1. 2 parties, 1 document, 1 policy2. Policy calls
1. Another policy (understanding definitions & cross-ontology reasoning)2. Another fact (drawing from additional resources)
3. Pre-processing for subjective judgments 4. Modeling – substituting parties or policies5. Validating – ensuring a hard result6. Scaling – modeling the Privacy Act
1. Adding to the cross-ontology knowledge base7. Future possibilities
• Future work• Technical Notes• Team
![Page 4: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/4.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
4
Challenge
Organizations have obligations regarding the collection, use, and
sharing of information.
![Page 5: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/5.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
5
Examples
• Law– HIPAA– SOX– Privacy Act
• Regulation– Know Your Customer– Suspicious Activity Reporting
• Contract– Business partners– Vendors
• Policy– Corporate– Association
![Page 6: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/6.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
6
Accountability
How should organizations ensure that they meet those obligations?
How should they prove to others that they are meeting those obligations?
![Page 7: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/7.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
77
The Goal – Accountable Systems
System, system on the wall…Is this fair use
after all?
Ability for systems to determine
whether each use of data is/was permitted
by the relevant rules for the particular data, party, and circumstance
and make that decision available to access control, audit, and other technology
for real-time enforcement, retrospective reporting, redress, and risk modeling.
![Page 8: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/8.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
8
About this Project
• Sponsor: Department of Homeland Security• Modeling Fusion Centers
– Information sharing– Privacy rules
• Creating a prototype Accountable System
![Page 9: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/9.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
9
Assumptions
• Web-based – All users and files on internet or intranet
• Semantic Web– Greater interoperability, reusability, and extensibility
• Security & Authentication– Enhancement not replacement
• Enhancing Accountability & Transparency– NOT replacing lawyers
![Page 10: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/10.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
10
Scenarios
• Scenario 1– Massachusetts analyst (Mia) sends Request for Information
(RFI) to Department of Homeland Security agent (Feddy). – RFI contains criminal history info about a specific person
(RBGuy); regulated by Massachusetts General Law 6-172.
RFI re:RBGuy
MGL6-172
Mia Feddy
![Page 11: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/11.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
11
Transaction Simulator
Links to real files - user profiles, the memo, and the relevant policy - that the reasoner will use.
![Page 12: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/12.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
12
Rule: Mass. General Law § 6-172(Privacy of Criminal Records)
• Applies to – Criminal Justice Agencies– Agencies given statutory permission
• E.g., military recruiting
– Agencies determined to be appropriate recipients in the public interest
– Requests by the general public
![Page 13: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/13.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
13
MGL6-172
MA MA
DHS
DHS
User Profiles
User Profiles
User Docs
Policies
Mia
MGLOntology
RFI
Reasoner
Feddy
RBGuy
What the Reasoner Knows
![Page 14: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/14.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
14
Simple Compliance Answer
“Transaction is compliant with Massachusetts General Law, Part I, Title II,
Chapter 6, Section 172.”
![Page 15: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/15.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
15
Detailed Explanation
“[Recipient,] Fred Agenti, is a member of a Criminal Justice Agency…”
![Page 16: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/16.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
16
Accomplishment
• Reasoner received– Mia’s user profile (27 facts)– Feddy’s user profile (25 facts)– Mia’s document (6 facts)– MGL § 6-172 (35 sub-rules)
• Produced correct result!
![Page 17: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/17.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
17
Scenarios
• Scenario 2– Baltimore police detective, Maury, does a federated search query
across multiple systems; Mia’s memo is responsive.
– The Massachusetts system will decide whether Maury can access the document.
RFI re:RBGuy
MGL6-172
Maury ?
![Page 18: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/18.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
18
The rule calls another rule:Comparing definitions
• MGL § 6-172 – requires recipient be a “Criminal Justice Agency”
• But, having the label “Criminal Justice Agency” is not sufficient
• Different jurisdictions have different definitions
• MGL § 66A-1 (defines “CJA”)
– “…an agency at any level of government which performs as its principal function activity relating to (a) the apprehension, prosecution, defense, adjudication, incarceration, or rehabilitation of criminal offenders; or (b) the collection, storage, dissemination, or usage of criminal offender record information.”
• Maury’s MD user profile– “…exercise the power of arrest”
![Page 19: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/19.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
19
Cross-OntologyKB
MDCCL12.15.01.03(Definitions)
MGL6-172
MD MD MA MA
User Profiles
User Profiles
User DocsPolicies
Policies
Mia
MGL 66A-1(Definitions)
MGLOntology
RFI
Reasoner
Maury
RBGuy
MDCCLOntology
What the Reasoner Knows
New input
![Page 20: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/20.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
20
Cross-ontology Knowledge Base
“authorized by law to exercise power of arrest…” is “sameAs” “apprehension”
![Page 21: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/21.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
21
![Page 22: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/22.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
22
Determines that Maury’s MD function of “…arrest” meetsthe MA definition of Criminal Justice Agency
![Page 23: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/23.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
23
Adding additional fact requirements
• MGL § 6-172
– Requires that the requestor be a CJA– AND certified by a Board
• In writing• No access until after that certification
![Page 24: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/24.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
24
Cross-OntologyKB
MDCCL12.15.01.03(Definitions)
MGL6-172
MD MD MA MA
User Profiles
User Profiles
User DocsPolicies
Policies
Mia
MGL 66A-1(Definitions)
MGLOntology
RFI
Reasoner
Maury
RBGuy
MDCCLOntology
What the Reasoner Knows
New input
Org. Admin.
CertifiedList
MGL6-172
![Page 25: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/25.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
25
Determines that Maury is a member of an organization“which is certified by the board…”
![Page 26: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/26.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
26
Addressing subjective rules:In the Result
• In Scenario 1 (Mia to Feddy), the reasoner listed subjective requirements as conditions to the finding of compliance
![Page 27: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/27.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
27
Result Conditional on Subjective
Compliance “additionally requires” that recipient “is performing Criminal Justice Duties” and the
“Request…is limited to data necessary for [those] duties”
![Page 28: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/28.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
28
Next: Pre-processing subjective requirements
![Page 29: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/29.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
29
Scenarios
• Scenario 3– Baltimore detective (Maury) is sending a response to the
Massachusetts analyst’s (Mia’s) Request for Information (RFI).– Response contains detailed criminal history info about a specific
person (RBGuy); regulated by MD Code of …. Law 12.15.01.11.
Maury
Response re:RBGuy
MDCCL12.15.01.11
Requests Subjective Assertions
Mia
![Page 30: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/30.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
30
Query for Subjective Assertions
![Page 31: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/31.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
31
Decision incorporates Subjective Assertions
Data is “required in the performance of Mia’sfunction as a criminal justice agency.”
Recipient’s “identity has been verified by” sender.
![Page 32: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/32.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
32
What if?Applying a different rule
• Scenario 4– Maury is cautious. Before giving his information to Mia, he wants to
understand what she can do with his information.
– Maury compares:
• Scenario 4a - Maury seeking to share his Response with Florida Dept of Law Enforcement (FDLE) under MD law
• Scenario 4b - Mia seeking to share Maury’s Response with FDLE under MA law
Maury Response re:RBGuy
MDCCL12.15.01.11
Mia
Response re:RBGuy MGL6-172
MDCCL12.15.01.11XX
![Page 33: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/33.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
33
Risk Modeling with a Different Party &/or Policy
![Page 34: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/34.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
34
Cross-OntologyKB
MGL6-172
MA MA
User Profiles
Policies
Mia
MGL 66A-1(Definitions)
MGLOntology
Reasoner
Org. Admin.
CertifiedList
MGL6-172
MDCCL12.15.01.03(Definitions)
MD MD
User Profiles
User Docs
Policies
Reasoner
Maury
Responses
ToMia
MDCCL12.15.01.11
MDCCLOntology
Cross-OntologyKB
FDLE
FDLE
User Profiles Policies
FDLE
FLOntology
What the Reasoner Knows
![Page 35: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/35.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
35
![Page 36: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/36.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
36
Testing the policy expression
• Scenario 5– Under the MA law, the public can have access to some criminal
history info• If there was a conviction
• If the possible sentence was greater than 5 years
• If the subject is still in jail or on parole
Maury’s Response re:RBGuy
MGL6-172
John Q. Public Mia
![Page 37: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/37.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
37
Testing with “John Q. Public”.
![Page 38: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/38.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
38
![Page 39: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/39.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
39
Accomplishment
• Recognizes that John Q. Public doesn’t meet any of the criteria in paragraph 1.
• Finds the match in sub-rules from paragraph 7.• Reads the tags from the document to match with
the requirements – there was a conviction– the possible sentence was greater than 5 years– the subject is still in jail or on parole
![Page 40: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/40.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
40
Scenarios:Increasing Rule Complexity
• Scenario 6– Feddy from DHS wants to respond to Mia.– His response will be regulated by the Privacy
Act and its 135 sub-rules (1200 lines of code)
Feddy
Response re:RBGuy
5 USC 552a
Mia
![Page 41: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/41.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
41
MA MA
User Profiles
Policies
Mia
MGLOntology
Reasoner
What the Reasoner Doesn’t Know
5 USC 552a(Privacy Act)
DHS
DHS
User Profiles
User Docs
Policies
Reasoner
Responses
FeddyToMia
Priv ActOntology
Cross-OntologyKB
RoutineUsesX
OtherPoliciesOther
PoliciesOtherPoliciesOther
PoliciesOtherPoliciesOther
PoliciesX
There is a Routine Use noticethat would permit the sharing
The law requires each agencyto create 40 other policies
![Page 42: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/42.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
42
Non-compliant for Many Reasons
![Page 43: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/43.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
43
Adding to Cross-Ontology Knowledge
- Feddy notices something not quite right.
- He knows* he can treat Mia as “head of” her agency for this purpose because the head of her organization delegated the record requesting authority to “section chiefs”.
- The system will let him add that equivalency to the cross-ontology knowledge base.
* DOJ says (http://www.justice.gov/opcl/1974condis.htm): Record-requesting authority may be delegated down to lower-level agency officials when necessary, but not below the "section chief" level. See OMB Guidelines, 40 Fed. Reg. at 28,955; see also 120 Cong. Rec. 36,967 (1974), reprinted in Source Book at 958, available at http://www.loc.gov/rr/frd/Military_Law/pdf/LH_privacy_act-1974.pdf.
Requestor: Mia Analysa job title section head does not match head of
as required by The_Privacy_Act_of_1974_552a_b7.
![Page 44: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/44.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
44
Knowledge Base Editor
Feddy tells his system that “section chief” and “head of” are equivalent in this context
by cutting and pasting their link addresses into the blanks.
![Page 45: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/45.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
45
– Feddy runs his request again (after adding the “same as” information to the cross-ontology knowledge base)
Feddy
Response re:RBGuy
5 USC 552a
Mia Cross-Ontology
KB
“section chief” same
as “head of”
![Page 46: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/46.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
46
“…compliant with…
a Federal Statute The Privacy Act of 1974, 5 U.S.C. 552a (b)(7)”
![Page 47: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/47.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
47
Possible Future Scenarios
• Hand-shake– Recipient is permitted to accept– Sender is permitted to send
• Applying multiple rules• Potentially conflicting rules• Recognizing compliant pattern and applying it to
large volume transactions
![Page 48: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/48.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
48
Future Research
• Scalability – Goal-directed reasoning
• Transparency– Permanent store for TMS– Aggregate reporting
• Validation– Policy expression– Results
• Flexibility– Handling incomplete information– Propagation
![Page 49: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/49.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
49
Technology Notes
![Page 50: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/50.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
50
MGL6-172
MA MA
DHS
DHS
User Profiles
User Profiles
User Docs
Policies
Mia
MGLOntology
RFI
Reasoner
Feddy
RBGuy
What the Reasoner Knows:
• n3 & RDF• User profiles adapted from FOAF• Memos in pdf with xmp• Policies expressed in AIR
![Page 51: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/51.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
51
User Profile: rdf
![Page 52: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/52.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
52
User Profile: Tabulator
![Page 53: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/53.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
53
User Document: pdf
![Page 54: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/54.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
54
User Document: embedded xmp
![Page 55: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/55.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
55
Policy: English
![Page 56: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/56.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
56
Policy: AIR
• Each policy is represented as
• rules and patterns in a policy file • definitions and classifications inan ontology file.
![Page 57: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/57.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
57
Policy: Tabulator
![Page 58: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/58.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
58
Simple Compliance Answer
• Can use address line commands• Running cwm
• Forward chaining reasoner• Written in python
![Page 59: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/59.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
59
• Truth Maintenance System (TMS) • Tracks dependencies• Retains premises leading to conclusion• Retains logical structure of a derivation• Permits automatically generated explanations• Pressing the “Why?” button reveals each dependency & all associated premises
Detailed Justification
![Page 60: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/60.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
60
“Lawyer Pane”
• Format is modeled after IRAC • Issue, Rule, Analysis, Conclusion• First year law school technique for answering hypotheticals• Working towards making output easier to read for lawyers, policy analysts, and line of business
![Page 61: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/61.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
61
Statute Text
• MGL § 6-172– http://www.mass.gov/legis/laws/mgl/6/6-172.htm
• MCCL 12.15.01.11– http://www.dsd.state.md.us/comar/comarhtml/12/12.15.01.11.htm
• 5 USC § 552a (Privacy Act) – http://www.law.cornell.edu/uscode/5/usc_sec_05_00000552---a000-.ht
ml
![Page 62: Accountable Systems: Fusion Center Prototype](https://reader035.fdocuments.us/reader035/viewer/2022062803/568146d7550346895db40c02/html5/thumbnails/62.jpg)
For info, contact: kkw”at”mit.edu K. Krasnow Waterman
62
Our Team
• Tim Berners-Lee• Hal Abelson• Gerry Sussman• Lalana Kagal• K. Krasnow Waterman• Bill Cattey• Mike Speciner
• Ian Jacobi• Oshani Seneviratne• Samuel Wang• Jim Hollenbach• Mike Rosensweig• Rafael Crespo• Patrick Vatterott