Collaborative Research: Formal Privacy

在互联网上收集信息的压力越来越大，这就需要更复杂的方式来描述隐私权，并将其与合法的商业和执法目标相平衡。现在，许多企业都依赖于收集在线客户信息的能力，以此作为他们在市场上增值的基础。将互联网用于或可能用于儿童色情、策划仇恨犯罪和恐怖主义等目的，引起了人们对网络监测的高度兴趣(并放松了对网络监测的管制)。盗窃知识产权导致了许多保护机制的发展；这些机制往往涉及各种登记和非自愿监测。为了简化安全性(并探索有利可图的商业模式)，许多公司寻求充当私人信息(如密钥、身份验证秘密和信用卡号码)的第三方管理员。与这些趋势背道而驰的是，许多公民被用来从他们和各种维护隐私权的团体那里收集信息的咄咄逼人的手段所激怒。在帮助和限制信息收集方面，技术已经取得了许多进步。一个重要的趋势是朝着用于创建和管理数字凭证和授权数据库的更先进的系统发展。在目前的实践中，凭证有时是“推入”的(比如出示进入电影院的机票)，有时是“拉”的(比如凭一张“无纸化”的机票进入飞机座位)，有时两者兼而有之(比如用信用卡在网上确认其有效性)。这些方法都是基于互联网的，近年来技术进步大大增加了选择的范围。例如，关于公钥系统的工作是基于“推入”证书链进行授权的先进技术，并提高了证书收集的自动化程度。另一个重要的趋势是使用匿名技术来保护隐私的更先进的系统。洋葱路由器和匿名网络发布服务器等工具提供了一些支持，但其他技术直接帮助获得特权的细粒度机制，而不会不必要地暴露信息。这项工作旨在为在这些进步的背景下描述隐私的特征提供正式的支持。到目前为止，改进访问控制系统和凭据分发的努力几乎没有关注隐私机制，导致系统擅长可靠地传播凭据，但没有在众所周知的隐私约束下这样做。这一合作将建立在我们在凭证分发和匿名性方面的工作的基础上，以创建一个集成的架构和协议，以在隐私限制的限制内提供高级访问控制。

Growing pressure to collect information on the Internet has created a need for more sophisticated ways to characterize privacy rights and balance them against legitimate commercial and law enforcement objectives. A wide range of businesses now rely on their ability to collect information about online customers as a foundation of their added value in the market place. The use or potential use ofthe Internet for purposes such as child pornography and planning of hate crimes and terrorism have heighted interest in (and loosened regulations on) network monitoring. Theft of intellectual property has led to the development of numerous protection mechanisms; these often involve registrations and involuntary monitoring of various kinds. In order to make security easier (and explore a lucrative business model), a number of companies seek to act as third-party caretakers of private information such as keys, authentication secrets, and credit card numbers. Arrayed against these trends are many citizens incensed by aggressive means used to collect information from them and a variety of groupsthat champion privacy rights.There have been many advances in technologies both to aid information gathering and limit it. One important trend is toward more advanced systems for creating and managing digital credentials and authorization databases. In current practice credentials are sometimes `pushed' (like presenting a ticket to get into a movie theater) sometimes `pulled' (like getting access to an airplane seat witha `paperless' ticket) and sometimes both (like making a purchase at a store with a credit card whose validity is confirmed online). These approaches have Internet-based analogs, and technical advances have increased the range of options considerably in recent years. For example, work on public key systemshas advanced techniques for delegation based on chains of `pushed' credentials and increased the automation of credential collection. Another important trend is toward more advanced systems for protecting privacy using anonymizing techniques. Tools such as onion routers and anonymous web publication servers provide some support but other techniques directly aid fine-grained mechanismsfor obtaining privileges without exposing information unnecessarily. This work aims to develop formal support for characterizing privacy in the context of these advances. Efforts to improve access control systems and credential distribution have paid little attention to privacy mechanisms so far, resulting in systems that are good at propagating credentials reliably, but nottuned to do so within well-understood privacy constraints. This collaboration will build on our work in credential distribution and anonymity to create an integrated architecture and protocols to provide advanced access control within the limitations of privacy constraints.