SGER: Collaborative Research: Secure and Auditable Privacy Contracts

提案编号：0751069PI：布伦特·耶纳机构：伦斯勒理工学院提案编号：0751095PI：Aggelos Kiayias机构：康涅狄格大学标题：SGER：协作研究：安全和可审计的隐私合同提案摘要网络空间的普及性带来的主要挑战之一是确保‘信任’并设计可靠的系统来支持官方、商业和个人业务的关键基础设施。数以百万计的日常用户通过互联网将他们的个人信息传递给他们的医疗保健提供者、他们的银行、保险公司和其他服务提供者。一旦这些个人信息被转移，在许多情况下，它就被外包给其他方(其中一些人甚至可能居住在国外)进行存储和处理。它可以被出售或转售用于数据挖掘。私人数据的收集、处理和再销售是一个价值数百万美元的行业，具有严重的安全和隐私漏洞，包括无意中泄露或丢失数千或数百万人的个人信息。尽管出于商业(例如，营销、保险设计)、科学甚至安全原因(例如，识别诸如流行病、生物战实例等公共卫生问题的爆发)，显然需要知识发现，但目前，“数据生产者”(即，像我们所有人一样的用户)无法控制谁、如何、该方案通过引入一种称为安全和可审计的私有合同(SAP合同)的新机制来考虑上述根本问题。SAP合同可用于定义隐私级别和数据挖掘数量之间的权衡。这样的权衡可以在数据源和数据挖掘者之间进行协商和定制。SAP合同精确地定义了可以在人事记录中执行的功能和权限。它的目的是将隐私需求与数据收集、传输、营销和处理的需求联系起来，从而使敏感的私人数据能够被视为商品。SAP合同不同于当前的技术状态，例如隐私保护数据挖掘方法，因为它不依赖于基于服务器的数据隐藏。这是对密码数据库研究的补充和好处。PI建议设计、实现和测试此范例的原型，以建立概念证明并显示SAP合同的可证明安全属性，包括保密性、完整性和可审计性。如果成功，该项目将提供可证明和可审计的可用性。它将把隐私和数据挖掘研究与不同的经济模式结合起来，并冒险进入新的研究领域。

Proposal Number: 0751069PI: Bulent Yener Institution: Rensselaer Polytechnic InstituteProposal Number: 0751095PI: Aggelos Kiayias Institution: University of Connecticut Title: SGER: Collaborative Research: Secure and Auditable Privacy ContractsProposal AbstractOne of the major challenges imposed by the pervasiveness ofcyberspace is to ensure ``trust'' and design trustworthy systems tosupport the critical infrastructure for official, commercial, andpersonal business. Millions of everyday users pass their personnelinformation over the Internet to their health-care providers, totheir banks, to insurance companies and other service providers.Once such personnel information is transferred, in many cases, it isoutsourced to other parties (some of which may even reside inforeign countries) for storage and processing. It may be sold orresold for data mining.The collection, processing and resale of private data is amulti-million dollar industry that has serious security and privacybreaches including inadvertently revealing or loosing thepersonal information of thousands or millions of people.While there is a clear need for knowledge discovery for commercial(e.g., marketing, insurance design), scientific and even securityreasons (e.g., identifying public health problem outbreaks such asepidemics, biological warfare instances), at present, ``dataproducers'' (i.e., users like all of us) have no control of who,how, and what exactly is done with such private and sensitive data.This proposal considers the above fundamental problem by introducinga novel mechanism called secure and auditable privacycontracting (SAP-Contracting). An SAP-Contract can be used todefine a tradeoff between level of privacy and amount of datamining. Such a tradeoff can be negotiated and customized betweendata sources and data miners. An SAP-Contract defines precisely thefunctions and permitions that can be performed in personnel records.It aims to bridge the need for privacy with the need for datacollection, transfer, marketing and processing; thus, enablesensitive private data to be treated as a commodity.SAP-Contracting is different from the current state of art such asprivacy preserving data mining approaches since it does not rely onserver based data hiding. It complements and benefits from theresearch on cryptographic databases.The PIs propose to design, implement and test a prototype of thisparadigm to establish a proof of a concept and show provablesecurity properties of SAP-Contracts, includingconfidentiality, integrity, and auditability.If successful this project will provide provable and auditableprivacy. It will marry privacy and data mining research withdifferent economical models and venture into new research areas.