Trust TEE?: Exploring the Impact of Trusted Execution Environments on Smart Home Privacy Norms
Trust TEE?: Exploring the Impact of Trusted Execution Environments on Smart Home Privacy Norms
复制标题
DOI：
10.56553/popets-2023-0067
复制
发表时间：
2023-07
期刊：
影响因子：
--
通讯作者：
Pratik Musale;Adam J. Lee
中科院分区：
文献类型：
--
作者：
Pratik Musale;Adam J. Lee
智能相机和扬声器等物联网设备提供了便利，但可以收集私人空间内的敏感信息。虽然研究已经调查了用户对源自这些类型的设备的信息流的舒适度的感知，但是很少关注感测硬件在影响这些情绪中的作用。鉴于可信执行环境（TEE）在商品和服务器级设备中的扩散，我们使用上下文完整性框架调查了1049名美国成年人，以了解在物联网生态系统中包含基于云的TEE如何影响数据收集和使用的舒适度。我们发现，基于云的TEE显着提高用户的舒适度跨信息流。对于小公司制造的设备来说，这些增长更为明显，这表明基于云的TEE可以弥合以前记录的小公司和大公司之间的用户信任鸿沟。情绪周围的同意，旁观者的数据，和无限期的保留是不受存在的TEE，表明这些规范的中心。
IoT devices like smart cameras and speakers provide convenience but can collect sensitive information within private spaces. While research has investigated user perception of comfort with information flows originating from these types of devices, little focus has been given to the role of the sensing hardware in influencing these sentiments. Given the proliferation of trusted execution environments (TEEs) across commodity- and server-class devices, we surveyed 1049 American adults using the Contextual Integrity framework to understand how the inclusion of cloud-based TEEs in IoT ecosystems may influence comfort with data collection and use. We find that cloud-based TEEs significantly increase user comfort across information flows. These increases are more pronounced for devices manufactured by smaller companies and show that cloud-based TEEs can bridge the previously-documented gulfs in user trust between small and large companies. Sentiments around consent, bystander data, and indefinite retention are unaffected by the presence of TEEs, indicating the centrality of these norms.