CT-ISG: Improving the Privacy and Security of Online Survey Data Collection, Storage, and Processing

该项目涉及开发加密协议和技术，以提高在线调查数据收集、存储和处理的安全性和隐私性。具体而言，加密协议被设计用于以这样的方式对在线调查数据进行计算，即协议仅显示经批准的输出，而不是输入数据。 因此，该协议充当了目的执行机制，使得数据只能在授权时使用，并且不能再为一个目的收集而非法用于另一个目的。 这种方法的好处是保护收集的在线调查数据免受黑客、间谍软件、行为不端的内部人员以及因存储设备丢失而意外泄露的影响。 安全性和目的执行反过来又使得有可能对敏感主题的调查获得更高质量的响应，鉴于社会对调查的日益依赖，这是一个重大的好处，其中重要的政策结论往往是在健康科学，社会和行为科学，实验经济学，以及人类受试者的个体反应被认为是敏感的并保持私密的其他学科。通过对网络成瘾的在线调查，对加密协议进行了测试。数据分析技术的协议被开发，以帮助分析收集的数据。参与该项目的学生获得了跨学科人才的独特组合。 这项工作的结果通过该项目的网址传播：http://www.cs.purdue.edu/homes/mja/secsurv/SecureSurv.html

This project involves the development of cryptographic protocols and techniques to enhance the security and privacy of the collection, storage, and processing of online survey data. Specifically, cryptographic protocols are designed for carrying out computations on online survey data in such a manner that only the approved output is revealed by the protocol, not the input data. The protocol therefore acts as a purpose-enforcement mechanism such that the data can be used only as authorized and can no longer be collected for one purpose and illicitly used for another. This approach has the benefit of protecting collected online survey data from hackers, spyware, misbehaving insiders, and accidental disclosure through the loss of a storage device. The security and purpose-enforcement in turn make it possible to potentially acquire higher quality responses to surveys on sensitive topics, a significant benefit in view of the increasing societal reliance on surveys from which important policy conclusions are often drawn in the health sciences, social and behavioral sciences, experimental economics, and other disciplines where the human subjects' individual responses are to be considered sensitive and kept private. The cryptographic protocols are tested through the administration of an online survey on Internet addiction. Protocols for data analysis techniques are developed to aid in the analysis of the collected data. The students involved in this project acquire a unique combination of inter-disciplinary talents. The results of this work are disseminated through the project Web site: http://www.cs.purdue.edu/homes/mja/secsurv/SecureSurv.html