Data provenance to audit compliance with privacy policy in the Internet of Things
Data provenance to audit compliance with privacy policy in the Internet of Things
复制标题
DOI：
10.1007/s00779-017-1067-4
复制
发表时间：
2018-04-01
影响因子：
--
通讯作者：
Bacon, Jean
中科院分区：
文献类型：
--
作者：
Pasquier, Thomas;Singh, Jatinder;Bacon, Jean
管理物联网中的隐私是一项重大挑战。我们认为，通过审核数据流获得的信息可以帮助证明处理个人数据的系统满足监管和用户要求。因此，应审核处理个人数据的组件，以证明其行为符合所有此类政策和要求。这种方法的一个有价值的副作用是，这样的审计过程将突出显示技术执行不完整或不正确的领域。技术援助在使隐私政策执行机制与数据保护法规保持一致方面发挥着明确的作用。开发实现这种一致性的技术所需的第一步是收集数据流的证据。我们描述了我们在生成、表示和查询审计数据方面的工作，并讨论了突出的挑战。
Managing privacy in the IoT presents a significant challenge. We make the case that information obtained by auditing the flows of data can assist in demonstrating that the systems handling personal data satisfy regulatory and user requirements. Thus, components handling personal data should be audited to demonstrate that their actions comply with all such policies and requirements. A valuable side-effect of this approach is that such an auditing process will highlight areas where technical enforcement has been incompletely or incorrectly specified. There is a clear role for technical assistance in aligning privacy policy enforcement mechanisms with data protection regulations. The first step necessary in producing technology to accomplish this alignment is to gather evidence of data flows. We describe our work producing, representing and querying audit data and discuss outstanding challenges.