Reference Encryption for Access Right Segregation and Domain Representation

With reference to a protection model featuring processes, objects and domains, we consider the salient aspects of the protection problem, domain representation and access right segregation in memory. We propose a solution based on protected references, each consisting of the identifier of an object and the specification of a collection of access rights for this object. The protection system associates an encryption key with each object and each domain. A protected reference for a given object is always part of a domain, and is stored in memory in the ciphertext form that results from application of a double encryption using both the object key and the domain key.

Interpretation of the Concept of the Right to Internet Access from the Perspective of International Law

The advent of the internet era breeds a new concept, namely, the right to internet access. Many countries and international organizations, as well as individuals, are advocating or have already embodied it as a basic human right, thus enhancing the issues of whether it should be incorporated into the macro system of international human rights. By analyzing the facts, this article points out that the international concept of the right to internet access should be distinguished from its domestic concept, for there are no legal sources about the right to internet access for guidance as with some treaties in the current international law, despite its close relationship with some existing rights such as the freedom of speech, press and assembly, or the right of equality, or the right to development. And there is still a long time before the legal value and related responsibilities as well as the boundaries about the right to internet access becomes a consensus in the international society. Even though there is quite a possibility, this right hasn’t been embodied as part of international human rights, and thus hasn’t made a legal concept in international human right law.

Challenges and New Directions of Information Accessibility for Persons with Disabilities in China: From the Perspective of the Convention on the Rights of Persons with Disabilities

Accessibility is the basis and prerequisite for persons with disabilities to enjoy and exercise all human rights and fundamental freedoms With the rapid development of the internet, providing and promoting information accessibility is considered an important obligation for the State In the process of transforming international human rights law into domestic law, how to deal with the human rights protection of persons with disabilities and the obligations of the private sector to ensure persons with disabilities receive services and products that meet the requirements and principles of information accessibility has become a development issue in the new era Against the backdrop of the Convention on the Rights of Persons with Disabilities and in the context of the booming development of the cause of persons with disabilities in China, legal scholars, persons with disabilities, and organizations have jointly proposed the Beijing Initiative on the Principles of Information Accessibility for Science and Technology Products It clarifies that the private sector should embrace the human rights model advocated by the Convention in terms of information accessibility, and provide equal participation for persons with disabilities in the process of designing, producing and selling scientific and technological products The Initiative also states that the private sector should keep pace with the United Nation’s sustainable development goals and the basic national policy of building a well-to-do society in an all round way, ensuring persons with disabilities are included within a moderately well-off society It also provides civil opinions on the formulation and clarification of relevant laws in the future.

The Rights of Persons Charged with Penal Offences to Access to Lawyers——A comparison between international and domestic laws

I. Getting help from lawyers and its realization according to international standards The right to defense for a person involving in a law suit is a universal human right. Article 11 of the Universal Declaration of Human Rights provides： ＂Everyone charged with a penal offence has the right to be presumed innocent until proved guilty according to law in a public trial at which he has had all the guarantees necessary for his defence.＂ This means （1） the right to defence is a basic human right due to all persons charged with a penal offence; （2） it is a basic requirement for the principle of presumption of innocence and fair trial; and （3） the realization of the fight needs practical and effective guarantees.

Security analysis of access control model in hybrid cloud based on security entropy

To resolve the problem of quantitative analysis in hybrid cloud,a quantitative analysis method,which is based on the security entropy,is proposed.Firstly,according to the information theory,the security entropy is put forward to calculate the uncertainty of the system' s determinations on the irregular access behaviors.Secondly,based on the security entropy,security theorems of hybrid cloud are defined.Finally,typical access control models are analyzed by the method,the method's practicability is validated,and security and applicability of these models are compared.Simulation results prove that the proposed method is suitable for the security quantitative analysis of the access control model and evaluation to access control capability in hybrid cloud.

“数据二十条”下探析数据资源持有权的内涵及框架构建

《关于构建数据基础制度更好发挥数据要素作用的意见》(简称“数据二十条”)提出了以“数据流通激励”为主旨的数据产权结构性分置制度。对数据资源持有权的合理配置影响到数据利益的第一次分配,是实现数据“共同使用、共享收益”的战略性目标的基础。基于传统排他性产权思维下的数据资源持有权分配模式,皆存在加剧数据共同生产者之间利益冲突的可能性。本文提出在数据生产者之间以“1+N”模式配置数据持有权,即“特定数据生产者的在先持有权+N个其他数据生产者的访问权”模式,通过技术治理和透明度治理等工具的支持,探索符合数据经济发展规律的、公平的高效的新型数据产权制度。

Protection of the Rights and Interests of Persons with Disabilities in China:Ideas,System and Challenges

People under the interpretation of Chinese culture have multiple values It emphasizes not only people in the collective sense, but also individuals in the individual meaning According to the Constitution of the People’s Republic of China, respecting and protecting the dignity and rights of persons with disabilities is the duty of the State and the whole of society, and one of the core values of the Constitution The protection system for the rights and interests of persons with disabilities in China has basically taken shape, with positive progress in the protection of the right to rehabilitation, the right to education, and the right to employment However, there are different challenges We should continue to promote the rule of law for persons with disabilities and build a more complete system for the protection of the rights and interests of persons with disabilities.

生育支持政策的权利之维——发达国家的实践及启示

关于发达国家的生育支持政策,从生育权利保障角度进行考察可知,这一政策体系具有“国家—个体”关系维度、以“国家—社会—个体”关系为基础的共同体维度的二维构造。前者以保障国民生存福祉为原则,以生育保障获得权和性别平等权为核心构造;后者以作为生育保障获得权补强机制的多元主体共同负担原则、婴幼儿的保育权为主要内容。生育支持政策鼓励生育的功能性目标,需通过上述权利的保障得以实现。从权利保障视域研究发达国家的生育支持政策,可以在基本理念、体系结构以及保障措施等方面为中国生育支持政策的建构提供借鉴与参考。

数字时代数据接入权的法律保障研究

数字浪潮席卷后的沙滩留下了许多名为“数字权利”的贝壳,引起学界热烈讨论,然而目前尚缺乏像数据接入权一样最为基础的权利概念。因此从新兴权利这一视角出发,宪法人权条款、人格尊严条款和概括限制条款为该权利的证立提供了宪法规范依据。数据接入权相当于公民在数字空间的生命,是个人通过数据与互联网连接形成的参与数字活动的资格,是数字时代的基本人权。该权利的实现有赖于数字法律制度的构建,充分发挥国家、平台和用户各个主体参与数字治理的能动性,明晰行政部门职能定位,建立完备的国家监管机制。数据的接入保护宜以分类分级规则为指导,尊重个人隐私权、知情权;同时,侵权责任遵循过错推定责任原则,并以无过错责任为补充,关注预防性责任应对潜在风险,引入公益诉讼机制,从而为公民的数据接入保护拉起最后一道防线。

基于属性加密的联盟区块链数据共享方法

在保证区块链内数据安全的前提下,数据共享的速度通常较慢,为减少数据共享所需时间,基于属性加密算法设计联盟区块链数据共享方法。构建分层访问树,在无密钥托管模式中完成对用户代理加密的分类,使用哈希函数简单处理分层模型;基于属性加密构造数据访问共享模型,定义数据库域值,设置系统公共参数,建立主密钥与公密钥,完成集中式的数据共享管理;设计区块链数据共享算法,依据公钥格式生成用户私钥,完成区块链内的数据共享。分别计算数据共享过程中安全索引、陷门生成、关键字搜索三个步骤的用时,由数据可知,在安全索引与关键字搜索时,属性加密算法的运算效率更高,在陷门生成过程中,属性加密算法的运算效率相对较高。该方法的数据共享总用时为991 ms,共享时间更短,速度更快。

Ending Privacy’s Gremlin: Stopping the Data-Broker Loophole to the Fourth Amendment’s Search Warrant Requirement

Advances in technology require upgrades in the law. One such area involves data brokers, which have thus far gone unregulated. Data brokers use artificial intelligence to aggregate information into data profiles about individual Americans derived from consumer use of the internet and connected devices. Data profiles are then sold for profit. Government investigators use a legal loophole to purchase this data instead of obtaining a search warrant, which the Fourth Amendment would otherwise require. Consumers have lacked a reasonable means to fight or correct the information data brokers collect. Americans may not even be aware of the risks of data aggregation, which upends the test of reasonable expectations used in a search warrant analysis. Data aggregation should be controlled and regulated, which is the direction some privacy laws take. Legislatures must step forward to safeguard against shadowy data-profiling practices, whether abroad or at home. In the meantime, courts can modify their search warrant analysis by including data privacy principles.

In Bangla There Is No Word for Vagina —Reflections on Language, Sexual Health, and Women’s Access to Healthcare in Resource-Limited Countries

Language plays a central role in how gender and sexuality are described. In Bangla or Bengali, physicians, when educating and counseling women patients, do not have a socially acceptable word for “vagina”. If language is missing for female genitalia or important female sexual functions, could this absence reflect on the position of women in society, reproductive rights, and access to healthcare? Is there a relationship between language and the high rates of the gender-based cervical and breast cancers in some low and middle-income countries? This commentary examines scholarship on the topic of language, the female body, gender-based violence, disparities of healthcare for women, and the consequences of language on sexual attitudes and health.

论联合国职员的诉诸司法权

诉诸司法权作为一项重要的基本人权已逐渐成为一种共识。在国际组织与其职员的就业争端中,基于保障国际组织职员的个人权利与维护国际组织的司法管辖豁免这两个方面的需要,联合国已经开始重视诉诸司法权的保障,通过构建和完善其内部司法机制加以落实,并在国际人权保障中取得令人瞩目的成果。在国际组织公共行政权力与日俱增、个人权益受其影响渐深的背景下,对国际法上的个人实现诉诸司法权的联合国实践,具有较强的理论价值与现实意义。当然,目前联合国内部司法上诉机制在诉讼主体、救济措施等方面仍存在不少问题,阻碍了联合国职员诉诸司法权的进一步实现。对此,联合国应继续完善相应制度,其内部司法机构也需要尽可能利用司法裁量权来突破其规约中不合理的限制,以更充分、全面地保障联合国职员的诉诸司法权。

公共数据开放的安全风险及应对策略

[研究目的]对公共数据开放面临的来自技术、组织、环境三个层面的安全风险进行分析,并从当前治理现状与困局入手探索安全风险的治理对策。[研究方法]以文献研究、案例分析、政策实证等方法结合TOE理论框架对公共数据开放面临的安全风险、治理需求、应对策略等进行研究。[研究结论]应立足公共数据开放治理的主要问题,通过赋予利益相关主体的数据访问权,明确利益相关主体参与风险治理的路径;从引入区块链技术、建立数据资产台账、明确责任机制等方面增强治理工具的技术性和操作性。

多源海量隐私大数据可靠性访问权限安全认证

多源数据的复杂性以及大数据传播速度快等特点,会导致隐私数据易被不正当的攻击手段窃取,且安全认证难度较大,从而导致大数据安全性降低。为解决上述问题,提出一种多源海量隐私大数据可靠性访问权限安全认证方法。采用区块链技术检测海量多源隐私数据中的恶意节点,考虑到恶意节点在多源网络中受较多不确定因素影响,为提升节点检测信用度,设置影响因素判定范围用作恶意节点判断标准。结合指纹魔方算法针对检测后的多源隐私大数据设定安全机制,确保多源隐私大数据的安全性。利用访问控制协议方法认证用户身份的合法性及数据的可靠性访问,实现隐私大数据可靠性访问权限安全认证。实验结果表明,所提方法在安全性测试中可以有效抵抗全部攻击,且认证时间开销低于4.7ms,验证了上述方法的可靠性强、实用性高。

利益平衡视角下的股东查阅权落实路径

股东查阅权源于股东财产权保护,以及股东与公司管理层的受托关系。查阅权有利于股东更好行使股东权利和监督公司经营管理。查阅权既有自益权属性,更有共益权属性。查阅权行使需要平衡股东知情权与公司经营权的关系。《公司法》强化股东权利保护,允许有限责任公司股东查阅会计凭证,并相应增加股份有限公司股东查阅会计账簿、会计凭证的规定。《公司法》增加股东查阅全资子公司相关材料的规定,增加股东查阅、复制相关材料应遵守相关法律的规定。为更好落实股东查阅权,同时平衡股东权利保护和公司利益保护的关系,应当根据查阅客体的敏感程度设置不同的举证责任和查阅方式。将正当目的作为平衡股东与公司利益的程序性限制,查阅的范围限于实现查阅目的的必要范围。将有限责任公司股东查阅权作为股东行使监督权尤其是制约控股股东滥用股东权利的重要手段。

论数据确权的一般化路径

《关于建构数据基础制度更好发挥数据要素作用的意见》(以下简称《数据二十条》)颁布之后,不少观点主张将权利客体区分为原始数据、数据集合和数据产品,分别赋予不同类型的数据产权,形成数据确权的复杂化路径。但实际上,区分确权缺乏必要性和可行性,不是最优的确权路径。绝对权意义上的财产权通常具有一般化的特征,表现为客体的抽象性、消极权能的显著性和积极权能的总括性。财产权之所以是一般化的,是由其调整权利人和不特定第三人法律关系的功能决定的。数据产权同样应该是绝对权意义上的财产权,因而数据确权应当采取一般化路径。数据产权的客体应该只是数据,不应该区分原始数据、数据集合和数据产品;数据的物理边界由数据在虚拟层面上的可访问性决定;以数据的可访问性为标准,可以区分建构公开数据产权和非公开数据产权。在数据确权一般化路径的基础上,还应当引入治理策略,一是对法定在先权益进行分离保护,二是明确规定法定访问权和使用权,从而更加精确地调整数据之上承载的多元利益。

第三人债务加入追偿权的基础法律关系与规则——对《民法典合同编通则司法解释》第51条的进一步探讨

《民法典》第552条规定债务加入却未规定第三人债务加入后对债务人享有追偿权,《民法典合同编通则司法解释》第51条对此作了规定。对第三人债务加入追偿权的基础法律关系性质,有连带责任说和不真正连带责任说。本文认为,第三人债务加入追偿权的法律关系与连带责任保证追偿权的法律关系相同,是不真正连带债务;不仅如此,这种不真正连带债务还存在两种不同形态,第三人履行全部债务的是典型不真正连带债务,履行部分债务的是部分不真正连带债务。第三人债务加入后对债务人享有的追偿权,既不是产生于不当得利或者无因管理,也不是产生于请求权让与,而是第三人因其债务履行行为代位取得债权人的债权,有权代债权人之位向债务人行使追偿权。该条司法解释的具体规则基本可行,但须适当补充必要规则。

冲突与弥合:个人信息刑事调取的数字转型与法律因应

数字技术深度嵌入犯罪治理,个人信息刑事调取发生数字嬗变,调取对象存储形式数据化、调取对象内容承载复杂化、与案件无涉的网络平台协助调取普遍化。然而,调取规则仍以物理空间为治理场景,刑事调取被概括定性为任意侦查,程序规制宽泛,规则偏重鉴真。个人信息刑事调取的规范面向与数字面向的显著差异使数字化刑事调取治理面临三重张力,刑事调取突破任意侦查属性,背离程序法定主义,对个人信息权益保障不足。对此,应当在个人信息分类分级与取证措施性质基础上,将个人信息刑事调取进行体系建构,并从调取目的、必要性及审批权限方面进行程序的合比例构造,再导入知情权、更正权,强化调取中的个人信息权利保障。

数据访问权的二元构造——以价值贡献和公共利益为构造基础

数据访问权是促进数据流通、发掘数据潜在价值的重要制度。欧盟作为访问权制度设计的先行者,通过《数据法案》确立用户对数据的直接访问权和数据携带权,规定用户使用和分享数据的目的不得与数据持有者的竞争性利益相冲突。欧盟将用户的数据权利定位为基于数据生成关系的低位阶权利,仅能实现数据持有者与用户之间的权利分配,难以充分发挥数据在宏观社会资源配置中的价值。根据数据动态分类理论,按数据访问和使用目的所关联的利益对数据进行动态分类,并据此构建两类数据访问权:一是基于价值贡献的访问权;二是基于公共利益的访问权。基于价值贡献的访问权旨在促进数据资源的公平分配,当数据访问目的与数据共同生成者利益相关时,可根据贡献份额共享数据价值,如智能设备制造商利用设备生成数据提升产品质量。数据共同生成者可独立访问其贡献生成的数据,并以合法使用为目的,根据自身开发能力提取数据价值。基于公共利益的访问权旨在实现数据的社会化利用,允许非数据生成者在数据使用目的符合公共利益时访问和使用数据。基于公共利益的访问权可进一步细分为两种类型:一是市场失灵情形下旨在推动社会创新的数据访问权,此时数据持有者的售后市场参与者或补充服务提供者有权向具有潜在垄断地位的企业申请访问开发、发展售后和补充服务市场所必需的数据;二是非市场失灵情形下基于其他公共利益的数据访问权,此时可出于公众健康、科学进步等社会创新之外的其他公共利益而访问数据。数据访问权的具体设计需要平衡数据持有者的合法权益与数据共享所产生的社会利益,如通过限定数据使用目的、设置合理经济补偿等措施,提升数据资源利用的可持续性。