CT-ISG: Improving the Privacy and Security of Online Survey Data Collection, Storage, and Processing

CT-ISG：提高在线调查数据收集、存储和处理的隐私和安全性

• 批准号: 0627488
• 负责人: Mikhail Atallah
• 金额: --
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627488&HistoricalAwards=false
• 关键词: CT; ISG; Improving; Privacy; Security

This project involves the development of cryptographic protocols and techniques to enhance the security and privacy of the collection, storage, and processing of online survey data. Specifically, cryptographic protocols are designed for carrying out computations on online survey data in such a manner that only the approved output is revealed by the protocol, not the input data. The protocol therefore acts as a purpose-enforcement mechanism such that the data can be used only as authorized and can no longer be collected for one purpose and illicitly used for another. This approach has the benefit of protecting collected online survey data from hackers, spyware, misbehaving insiders, and accidental disclosure through the loss of a storage device. The security and purpose-enforcement in turn make it possible to potentially acquire higher quality responses to surveys on sensitive topics, a significant benefit in view of the increasing societal reliance on surveys from which important policy conclusions are often drawn in the health sciences, social and behavioral sciences, experimental economics, and other disciplines where the human subjects' individual responses are to be considered sensitive and kept private. The cryptographic protocols are tested through the administration of an online survey on Internet addiction. Protocols for data analysis techniques are developed to aid in the analysis of the collected data. The students involved in this project acquire a unique combination of inter-disciplinary talents. The results of this work are disseminated through the project Web site: http://www.cs.purdue.edu/homes/mja/secsurv/SecureSurv.html

该项目涉及加密协议和技术的开发，以增强在线调查数据收集、存储和处理的安全性和隐私性。具体来说，加密协议旨在以这样的方式对在线调查数据进行计算：协议仅显示批准的输出，而不显示输入数据。 因此，该协议充当一种目的执行机制，使得数据只能在授权的情况下使用，并且不能再为一个目的而收集并非法用于另一个目的。 这种方法的优点是可以保护收集的在线调查数据免受黑客、间谍软件、行为不当的内部人员以及因存储设备丢失而意外泄露的影响。 安全性和目的执行反过来又使得有可能获得对敏感主题的调查的更高质量的答复，鉴于社会对调查的依赖日益增加，这是一个显着的好处，在健康科学、社会和行为科学、实验经济学以及其他学科中，重要的政策结论经常得出，在这些学科中，人类受试者的个人反应被认为是敏感的并保密的。加密协议通过网络成瘾在线调查的管理进行测试。开发数据分析技术协议是为了帮助分析所收集的数据。参与该项目的学生获得了独特的跨学科人才组合。 这项工作的结果通过项目网站传播：http://www.cs.purdue.edu/homes/mja/secsurv/SecureSurv.html