A user-centric privacy framework for pervasive environments

  • Authors:
  • Susana Alcalde Bagüés;Andreas Zeidler;Carlos Fernandez Valdivielso;Ignacio R. Matias

  • Affiliations:
  • Siemens AG, Corporate Technology, Munich, Germany;Siemens AG, Corporate Technology, Munich, Germany;Department of Electrical and Electronic Engineering, Public University of Navarra, Navarra, Spain;Department of Electrical and Electronic Engineering, Public University of Navarra, Navarra, Spain

  • Venue:
  • OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part II
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

One distinctive feature of pervasive computing environments is the common need to gather and process context information about real persons Unfortunately, this unavoidably affects persons' privacy Each time someone uses a cellular phone, a credit card, or surfs the web, he leaves a trace that is stored and processed In a pervasive sensing environment, however, the amount of information collected is much larger than today and also might be used to reconstruct personal information with great accuracy The question we address in this paper is how to control dissemination and flow of personal data across organizational, and personal boundaries, i.e., to potential addressees of privacy relevant information This paper presents the User-Centric Privacy Framework (UCPF) It aims at protecting a user's privacy based on the enforcement of privacy preferences They are expressed as a set of constraints over some set of context information To achieve the goal of cross-boundary control, we introduce two novel abstractions, namely Transformations and Foreign Constraints, in order to extend the possibilities of a user to describe privacy protection criteria beyond the expressiveness usually found today Transformations are understood as any process that the user may define over a specific piece of context This is a main building block for obfuscating – or even plainly lying about – the context in question Foreign Constraints are an important complementing extension because they allow for modeling conditions defined on external users that are not the tracked individual, but may influence disclosure of personal data to third parties We are confident that these two easy-to-use abstractions together with the general privacy framework presented in this paper constitute a strong contribution to the protection of the personal privacy in pervasive computing environments.