TEO: ephemeral ownership for IoT devices to provide granular data control
TEO: ephemeral ownership for IoT devices to provide granular data control
复制标题
DOI：
10.1145/3498361.3539774
复制
发表时间：
2022-06
期刊：
影响因子：
--
通讯作者：
Han Zhang;Yuvraj Agarwal;Matt Fredrikson
中科院分区：
文献类型：
--
作者：
Han Zhang;Yuvraj Agarwal;Matt Fredrikson
随着物联网(IoT)设备迅速普及，考虑到它们可以捕获的敏感数据的广度，它们引发了严重的隐私问题。在许多情况下，物联网设备收集除其所有者或管理员之外的其他人的数据，这些利益相关者在如何管理、使用或共享这些数据方面没有发言权，这一事实加剧了这些担忧。为了解决这一问题，我们提出了一种新的所有权模式-物联网短暂所有权(TEO)。TEO允许利益相关者在有限的时间内快速向物联网设备注册，从而声称对该设备生成的敏感数据拥有共同所有权。设备管理员保留决定谁可能成为临时所有者的能力，但不再拥有访问或控制设备生成的私有数据的权限。TEO中的加密数据只有在寻求该数据的不同共同所有者的明确许可后，才能由实体访问。我们使用ProVerif在符号模型中验证了支撑TEO的协议的关键安全性质。我们还实现了一个面向手机和嵌入式设备的跨平台TEO原型，并将其集成到三个实际应用案例中。我们的评估显示，TEO的延迟和电池影响通常很小，在一次性操作上增加了≤187毫秒，并为私有数据存储等重复操作引入了有限的(<；25%)开销。
As Internet-of-Things (IoT) devices rapidly gain popularity, they raise significant privacy concerns given the breadth of sensitive data they can capture. These concerns are amplified by the fact that in many situations, IoT devices collect data about people other than their owner or administrator, and these stakeholders have no say in how that data is managed, used, or shared. To address this, we propose a new model of ownership, IoT Ephemeral Ownership (TEO). TEO allows stakeholders to quickly register with an IoT device for a limited period, and thus claim co-ownership over the sensitive data that the device generates. Device admins retain the ability to decide who may become an ephemeral owner, but no longer have access or control to the private data generated by the device. The encrypted data in TEO is accessible only by entities after seeking explicit permission from the different co-owners of that data. We verify the key security properties of our protocol underpinning TEO in the symbolic model using ProVerif. We also implement a cross-platform prototype of TEO for mobile phones and embedded devices, and integrate it into three real-world application case studies. Our evaluation shows that the latency and battery impact of TEO is typically small, adding ≤ 187 ms onto one-time operations, and introducing limited (<25%) overhead on recurring operations like private data storage.