Information Technology Research (ITR): Sensitive Information in a Wired World

计算机和网络在商业、政府、娱乐和日常生活的几乎所有方面的日益增加的使用导致了敏感数据（即，如果使用不当，可能会损害数据主体或其他相关方的数据），并关注这些数据的所有权，控制权，隐私权和准确性已成为重中之重。 尽管在相关研究领域取得了重大技术成就（例如，密码学和安全，数据库系统和数据挖掘），没有全面的，端到端的技术基础设施来处理敏感数据的整个生命周期，甚至没有广泛的社会共识，关于我们的数据密集型网络世界中主要数据所有者的权利和责任。这个项目是一个多机构，多学科，多模式项目，全面查看网络世界中的敏感数据。 有两个主要的学术活动中心（耶鲁和斯坦福），三个较小规模的学术参与者（纽约大学史蒂文斯理工学院和新墨西哥州大学），以及非学术合作伙伴的大量参与，包括技术公司，（IBM、HP和Microsoft）、用户社区代表（花旗集团、美国国立卫生研究院、耶鲁大学医学信息学中心、人口普查局和特勤局），和基于DC的政策组织（民主与技术中心和电子隐私信息中心）。该项目的一个主要技术主题是隐私保护数据挖掘，更一般地说，满足尊重个人权利和允许执法机构和其他合法组织收集和挖掘大量数据集这两个潜在冲突目标的技术。 其他技术议程项目包括（1）分布式数据的可访问性和可靠性（2）在加密数据库上操作，（3）数据的远程控制，（4）排斥非法数据，以及（5）数据管理系统的可复制性。 由于这些技术目标受到对基本术语（最明显的是“隐私”）的含义缺乏一致意见的影响，该项目的一个主要目标是为研究权利、责任和公共政策制定一个概念框架，重点是敏感数据处理。 该项目的这一部分纳入了“上下文完整性”的概念，即在评估敏感性时考虑数据集的上下文和内容。该项目的预期成果包括处理敏感信息的下一代技术，该技术在质量上优于当前一代技术，以及有效的概念框架，用于政策制定和对数据主体，数据所有者，数据用户。

Increasing use of computers and networks in business, government,recreation, and almost all aspects of daily life has led to aproliferation of sensitive data (i.e., data that, if used improperly,can harm data subjects or other relevant parties), and concern aboutthe ownership, control, privacy, and accuracy of these data has becomea top priority. Despite significant technical accomplishments in relevant research fields (e.g., cryptology and security, databasesystems, and data mining), there is no comprehensive, end-to-endtechnological infrastructure for handling sensitive data over the entire course of their lifetime, nor is there even widespread socialagreement about the rights and responsibilities of major stakeholdersin our data-intensive, networked world.This project is a multi-institutional, multi-disciplinary, multi-modalproject that looks comprehensively at sensitive data in a networkedworld. There are two main academic centers of activity (Yale andStanford), three smaller-scale academic participants (StevensInstitute of Technology, NYU, and the University of New Mexico), andsubstantial participation by non-academic partners, includingtechnology companies, (IBM, HP, and Microsoft), representatives ofuser communities (Citigroup, NIH, Yale Center for Medical Informatics,the Census Bureau, and the Secret Service), and DC-based policyorganizations (The Center for Democracy and Technology and TheElectronic Privacy Information Center).A major technical theme of the project is privacy-preserving datamining, and, more generally, techniques for meeting the potentiallyconflicting goals of respecting individual rights and allowing lawenforcement and other legitimate organizations to collect and minemassive data sets. Other technical agenda items include (1)accessibility and reliability of distributed data (2) operating onencrypted databases, (3) remote control of data, (4) repelling hostiledata, and (5) auditability of data-management systems. Because thesetechnical goals are affected by lack of agreement about the meaningsof basic terms, most notably "privacy," a major goal of the project isthe development of a conceptual framework for the study of rights,responsibilities, and public policies focused on sensitive-datahandling. This part of the project incorporates the notion of"contextual integrity," which considers both the context and thecontent of data sets in assessing sensitivity.Projected outcomes of the project include a next generation oftechnology for handling sensitive information that is qualitativelybetter than the current generation's and an effective conceptualframework for policy making and philosophical inquiry into the rightsand responsibilities of data subjects, data owners, and data users.