TC: Medium: Collaborative Research: Mobile Personal Privacy and Security - A New Framework and Technology to Account for Human Values

该奖项是根据2009年《美国复苏和再投资法案》(公法111-5)提供资金的。在实现安全的同时保护移动电子设备不同程度隐私的技术解决方案方面取得了重大进展。一个在很大程度上尚未解决的问题是，知道要实施哪种类型的技术解决方案以及在什么情况下实施。之所以出现这一挑战，是因为在现实中，通常不存在明确的“最佳”或“正确”解决方案。看待这个问题的一种方式是关注这样一个事实，即这些设备可能在人们的生活中发挥不可或缺的作用，并影响重要的人类价值观：当然，安全和隐私，但也包括其他价值观，如自治、信任和身体健康。此外，这些价值观往往处于紧张状态。该项目将制定一个原则性和系统性的概念框架，在未来移动设备的两个典型例子--植入式医疗设备和移动电话安全应用--的背景下分析这些价值影响和紧张关系。我们方法的一个关键组成部分将是价值敏感型设计理论和方法的应用和推广。研究人员将开发和评估新技术，并与一系列利益攸关方开展实证工作，包括未来研讨会和半结构化访谈。预期成果包括分析移动设备的隐私、安全、自主和其他价值之间的关系和权衡的框架，该框架同时考虑了这些价值的情景和体现维度；这些问题的关键技术解决方案托盘；一组案例研究；以及最终设计供其他研究人员和从业者使用的建议。这项工作的成果不仅将开发技术机制，为新的移动技术提供“正确”的安全和隐私水平，而且还可以帮助影响在更广泛的一套目标和价值观的背景下对“权利”的定义。在更广泛的社会中，这里重点关注的技术的使用越来越多：植入式医疗设备和用于人身安全的高性能手机。在不显著损害隐私、信任和自主等其他关键价值观的同时，改善人类健康和人身安全将对此类技术的发展至关重要。预计分析此类问题的方法也将适用于其他技术，如个人物品上的RFID标签、用于支付通行费或交通费的智能卡等。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5). Significant progress has been made on technical solutions for implementing security while preserving varying degrees of privacy for mobile electronic devices. A largely unsolved problem involves knowing what type of technical solutions to implement and under what circumstances. This challenge arises because in actuality there is in general no such thing as a clear "optimal" or "right" solution. One way to view this problem is by focusing on the fact that such devices potentially play an integral role in people's lives and impact important human values: security and privacy of course, but also other values such as autonomy, trust, and physical well-being. Further, these values are often in tension. This project will develop a principled and systematic conceptual framework for analyzing these value implications and tensions in the context of two archetypical examples of future mobile devices: implantable medical devices and mobile phone safety applications. A key component of our approach will be the application and extension of the Value Sensitive Design theory and methodology. Researchers will develop and evaluate new technology, as well as undertake empirical work with a range of stakeholders, including Futures Workshops and semi-structured interviews. Expected outcomes include a framework for analyzing the relationships and trade-offs among privacy, security, autonomy, and other values for mobile devices that accounts for both situational and embodied dimensions of these values; a pallet of key technical solutions to these problems; a set of case studies; and finally design recommendations for use by other researchers and practitioners. Results of this work will not only develop technical mechanisms for providing the "right" level of security and privacy for new mobile technologies, but can help influence the definition of what "right" means in the context of the broader set of goals and values. In society more generally, there is an increasing use of technologies that are focused upon here: implantable medical devices and highly capable cell phones used for personal safety. Improving human health and personal safety, while not significantly undermining other key values such as privacy, trust, and autonomy, will be important in the development of such technologies. It is anticipated that the ways of analyzing such problems will be applicable to other technologies as well, such as RFID tags on personal possessions, Smart Cards for paying for tolls or transit fares, and many others.