Surprise: user-controlled granular privacy and security for personal data in SmarterContext

  • Authors:
  • Juan C. Muñoz;Gabriel Tamura;Norha M. Villegas;Hausi A. Müller

  • Affiliations:
  • Icesi University, Cali, Valle del Cauca, Colombia;Icesi University, Cali, Valle del Cauca, Colombia;Icesi University, Cali, Valle del Cauca, Colombia and University of Victoria, Victoria, British Columbia, Canada and IBM Canada CAS Research, Markham, Ontario, Canada;University of Victoria, Victoria, British Columbia, Canada and IBM Canada CAS Research, Markham, Ontario, Canada

  • Venue:
  • CASCON '12 Proceedings of the 2012 Conference of the Center for Advanced Studies on Collaborative Research
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Smart Internet relies on the exploitation of information obtained from interactions of users with web applications. A critical aspect for its success is the adoption of mechanisms that guarantee the protection of information sensitive to users. This paper presents Surprise, our solution to empower users with privacy and data security control for the access to their information, stored in Personal Context Sphere repositories. These repositories are defined and maintained by SmarterContext, our Smart Internet infrastructure that improves the quality of user experience in their interactions with web applications. Surprise (i) allows users to configure access permissions to their sensitive personal information to third parties, selectively and with different levels of granularity; (ii) supports changes in these configurations at runtime to add or remove third parties or permissions, and (iii) realizes partial encryption to share non-sensitive data with not explicitly authorized third parties, while protecting user identity. We analyze details of our proof-of-concept implementation with respect to the SmarterContext's privacy and security requirements.