SGER: Collaborative Research: Secure and Auditable Privacy Contracts

SGER：协作研究：安全且可审计的隐私合同

• 批准号: 0751095
• 负责人: Aggelos Kiayias
• 金额: $ 5万
• 依托单位: University of Connecticut
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-10-01 至 2008-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0751095&HistoricalAwards=false
• 关键词: SGER; Collaborative; Research; Secure; Auditable

Proposal Number: 0751069 PI: Bulent Yener Institution: Rensselaer Polytechnic Institute Proposal Number: 0751095 PI: Aggelos Kiayias Institution: University of Connecticut Title: SGER: Collaborative Research: Secure and Auditable Privacy Contracts Proposal Abstract One of the major challenges imposed by the pervasiveness of cyberspace is to ensure ``trust'' and design trustworthy systems to support the critical infrastructure for official, commercial, and personal business. Millions of everyday users pass their personnel information over the Internet to their health-care providers, to their banks, to insurance companies and other service providers. Once such personnel information is transferred, in many cases, it is outsourced to other parties (some of which may even reside in foreign countries) for storage and processing. It may be sold or resold for data mining. The collection, processing and resale of private data is a multi-million dollar industry that has serious security and privacy breaches including inadvertently revealing or loosing the personal information of thousands or millions of people. While there is a clear need for knowledge discovery for commercial (e.g., marketing, insurance design), scientific and even security reasons (e.g., identifying public health problem outbreaks such as epidemics, biological warfare instances), at present, ``data producers'' (i.e., users like all of us) have no control of who, how, and what exactly is done with such private and sensitive data. This proposal considers the above fundamental problem by introducing a novel mechanism called secure and auditable privacy contracting (SAP-Contracting). An SAP-Contract can be used to define a tradeoff between level of privacy and amount of data mining. Such a tradeoff can be negotiated and customized between data sources and data miners. An SAP-Contract defines precisely the functions and permitions that can be performed in personnel records. It aims to bridge the need for privacy with the need for data collection, transfer, marketing and processing; thus, enable sensitive private data to be treated as a commodity. SAP-Contracting is different from the current state of art such as privacy preserving data mining approaches since it does not rely on server based data hiding. It complements and benefits from the research on cryptographic databases. The PIs propose to design, implement and test a prototype of this paradigm to establish a proof of a concept and show provable security properties of SAP-Contracts, including confidentiality, integrity, and auditability. If successful this project will provide provable and auditable privacy. It will marry privacy and data mining research with different economical models and venture into new research areas.

提案编号：0751069 PI：Bulent Yener机构：伦斯勒理工学院提案编号：0751095 PI：Aggelos Kiayias机构：康涅狄格大学标题：SGER：合作研究：安全和可审计的隐私合同提案摘要网络空间的普及所带来的主要挑战之一是确保“信任”和设计值得信赖的系统，以支持官方，商业和个人业务的关键基础设施。每天有数百万用户通过因特网将其个人信息传递给保健提供者、银行、保险公司和其他服务提供者。一旦此类个人信息被转移，在许多情况下，它将被外包给其他方（其中一些甚至可能居住在外国）进行存储和处理。它可以被出售或转售用于数据挖掘。私人数据的收集、处理和转售是一个价值数百万美元的行业，存在严重的安全和隐私漏洞，包括无意中泄露或丢失数千或数百万人的个人信息。虽然对于商业（例如，营销、保险设计）、科学甚至安全原因（例如，确定公共卫生问题爆发，如流行病，生物战实例），目前，“数据生产者”（即，像我们所有人这样的用户）无法控制谁、如何以及到底对这些私人和敏感数据做了什么。该提案通过引入一种称为安全和可审计的隐私合同（SAP合同）的新机制来考虑上述基本问题。SAP合约可用于定义隐私级别和数据挖掘量之间的权衡。这种权衡可以在数据源和数据挖掘者之间进行协商和定制。SAP合同精确地定义了可以在人员记录中执行的功能和权限。它旨在将隐私需求与数据收集、传输、营销和处理需求联系起来;从而使敏感的私人数据能够被视为商品。SAP合同是不同的，从目前的艺术状态，如隐私保护的数据挖掘方法，因为它不依赖于基于服务器的数据隐藏。它补充和受益于密码数据库的研究。PI建议设计，实现和测试这个范例的原型，以建立一个概念的证明，并显示SAP合同的可证明的安全属性，包括机密性，完整性和可验证性。如果成功，该项目将提供可证明和可审计的隐私。它将把隐私和数据挖掘研究与不同的经济模型结合起来，并冒险进入新的研究领域。