Data Capsule: A New Paradigm for Automatic Compliance with Data Privacy Regulations
Data Capsule: A New Paradigm for Automatic Compliance with Data Privacy Regulations
复制标题
数据胶囊：自动遵守数据隐私法规的新范式
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
D. Song
中科院分区：
文献类型：
--
作者：
Lun Wang;Joseph P. Near;Neel Somani;Peng Gao;Andrew Low;David Dao;D. Song
数据收集速度的加快导致人们对隐私风险的认识不断提高，从而产生了像《通用数据保护条例》（GDPR）这样的新的数据隐私法规。这类法规是重要的一步，但自动合规性检查具有挑战性。在这项工作中，我们提出了一种新的范式——数据胶囊（Data Capsule），用于在异构数据处理基础设施中对数据隐私法规进行自动合规性检查。我们的关键见解是将数据主体的数据与管理数据处理方式的策略配对。该策略用我们的正式策略语言PrivPolicy指定，由数据主体在提供数据的同时创建并提供，并且在数据处理的整个生命周期（例如，数据处理系统对数据的转换，多个数据主体的数据聚合）中与数据相关联。我们引入了一种基于剩余策略概念的隐私策略静态执行解决方案，并提出了一种基于抽象解释的新算法，用于在PrivPolicy中推导剩余策略。我们的解决方案自动确保合规性，并且设计为与现有基础设施一起部署。我们还设计并开发了PrivGuard，这是一个参考数据胶囊管理器，它实现了数据胶囊范式的所有功能。
The increasing pace of data collection has led to increasing awareness of privacy risks, resulting in new data privacy regulations like General data Protection Regulation (GDPR). Such regulations are an important step, but automatic compliance checking is challenging. In this work, we present a new paradigm, Data Capsule, for automatic compliance checking of data privacy regulations in heterogeneous data processing infrastructures. Our key insight is to pair up a data subject's data with a policy governing how the data is processed. Specified in our formal policy language: PrivPolicy, the policy is created and provided by the data subject alongside the data, and is associated with the data throughout the life-cycle of data processing (e.g., data transformation by data processing systems, data aggregation of multiple data subjects' data). We introduce a solution for static enforcement of privacy policies based on the concept of residual policies, and present a novel algorithm based on abstract interpretation for deriving residual policies in PrivPolicy. Our solution ensures compliance automatically, and is designed for deployment alongside existing infrastructure. We also design and develop PrivGuard, a reference data capsule manager that implements all the functionalities of Data Capsule paradigm.