Confidentiality

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which statement best describes confidentiality?

A Only authorised people or systems can read the data

B The data is always available whenever anyone wants it

2. A student's marks are meant to be seen only by the student and their teacher. Which situation keeps confidentiality?

A Marks are posted on a public class board for everyone

B Marks are shown only after the student and teacher log in

3. Which is a breach of confidentiality?

A A teacher opens the marks of their own students

B A classmate opens another student's marks without permission

4. A student shares their school login with a friend, who then reads the student's private files. What has happened?

A Confidentiality has been breached

B Confidentiality has been kept

5. True or false: Confidentiality is only broken if data is changed or deleted.

A False: it is broken when unauthorised people can read the data

B True: it is only broken when data is altered or deleted

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Confidentiality		ALetting everyone read the marks breaks confidentiality, because only the student and teacher should be authorised.
2Breach of confidentiality		BcanRead(marks) = [student, teacher]
3Student marks should be seen only by the student and their teacher		CSending private marks to people who are not authorised is a breach of confidentiality.
4A classmate who is not on the allowed list tries to read the marks and is blocked		DOnly authorised people or systems can read data, and everyone else is kept out
5canRead(marks) = [everyone]		ESomeone who is not authorised sees data they should not be able to read
6Teacher emails the whole class everyone's marks		Fif user not in allowedReaders: deny

Definitions

Confidentiality

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF role _ "teacher" THEN DISPLAY marks END IF

IF user IN _______ THEN DISPLAY marks END IF

__ user IN allowed THEN DISPLAY marks END IF

breach ← viewer ______ allowed DISPLAY breach

IF breach = TRUE ____ DISPLAY "Confidentiality breach" END IF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A marks ← 85

B viewer ← 'Sam'

C owner ← 'Sam'

D IF viewer ≠ owner THEN

E DISPLAY marks

F ENDIF

Question 2

A marks ← 72

B user ← 'Jo'

C allowed ← ['Sam','Ms Lee']

D IF true THEN

E DISPLAY marks

F ELSE DISPLAY 'Access denied'

Question 3

A teacher ← 'Ms Lee'

B student ← 'Sam'

C allowed ← ALL_USERS

D IF user IN allowed THEN

E DISPLAY marks

Question 4

A file ← 'marks.txt'

B key ← 'S3cure!'

C SAVE file AS plain text

D SEND file TO teacher

Question 5

A INPUT user

B INPUT pass

C IF user ≠ '' THEN

D DISPLAY marks

E ENDIF

Answer Key

Confidentiality

Section A: Quick Questions

A — Only authorised people or systems can read the data

B — Marks are shown only after the student and teacher log in

B — A classmate opens another student's marks without permission

A — Confidentiality has been breached

A — False: it is broken when unauthorised people can read the data

Section B: Match the Pairs

Confidentiality → Only authorised people or systems can read data, and everyone else is kept out

Breach of confidentiality → Someone who is not authorised sees data they should not be able to read

Student marks should be seen only by the student and their teacher → canRead(marks) = [student, teacher]

A classmate who is not on the allowed list tries to read the marks and is blocked → if user not in allowedReaders: deny

canRead(marks) = [everyone] → Letting everyone read the marks breaks confidentiality, because only the student and teacher should be authorised.

Teacher emails the whole class everyone's marks → Sending private marks to people who are not authorised is a breach of confidentiality.

Section C: Definitions

Confidentiality — Only authorised people or systems can read data. Everyone else is kept out, like student marks seen only by the student and teacher. A breach is when someone else sees them.

Section D: Fill in the Blanks

IF role = "teacher" THEN
  DISPLAY marks
END IF

IF user IN allowed THEN
  DISPLAY marks
END IF

IF user IN allowed THEN
  DISPLAY marks
END IF

breach ← viewer NOT IN allowed
DISPLAY breach

IF breach = TRUE THEN
  DISPLAY "Confidentiality breach"
END IF

Section E: Spot the Error

D — The check is the wrong way round. Marks would be shown to everyone except the owner. It should be IF viewer = owner THEN so only the owner sees them.

D — The condition is always true, so every user (including Jo) can read the marks. It should check IF user IN allowed THEN so only authorised people see them.

C — The allowed list now includes everybody, so confidentiality is lost. It should list only the teacher and the student: allowed ← [teacher, student].

C — The marks file is left as plain text, so anyone who intercepts it can read it. It should be encrypted with the key: ENCRYPT file WITH key.

C — This only checks that a name was typed, so anyone can see the marks. The program must check the login with the password: IF login(user, pass) THEN.