CRII: SaTC: A System for Privacy Management in Ubiquitous Environments

随着移动和网络技术的激增，社会对网络空间中私人数据脆弱性的认识也在增强。保护私人信息变得特别重要，因为研究人员估计，如果入侵者知道他们的邮政编码、性别和生日，87%的美国人可以通过姓名和地址识别。这项提议的目标将是开发一套新的核查工具、算法和界面，以实现对用户私人信息的安全、有效和不引人注目的管理。所提出的方法利用正式的验证技术来确保满足预期的隐私属性和目标。由于建议的平台采用模块化和稳健的设计，因此可以重新调整和调整以适应特定用例和应用(例如，医疗保健、互联汽车系统和智能城市)的需求。所提出的系统将：(1)使用模型检查来确保更新的规则和边界正确地执行用户的隐私意图，给定用户的隐私边界和规则不断演变(例如，由于老龄化、社会压力以及健康和个人关系的变化)，(2)自动将控制策略转换为隐私保护协议执行，这可证明地强制执行隐私意图。为了实现这一点，将使用基于隐私规则和边界知识的新方法来激活隐私保护功能，以及新的加密工具。有关更多信息，请参阅项目网站：http://hodamehrpouyan.com/privacy.html。

As mobile and network technologies proliferate, so does society's awareness of the vulnerability of private data within cyberspace. Protecting private information becomes specially important, since researchers estimate that 87% of Americans can be identified by name and address, if their zip code, gender, and birthday are known to intruders. The goal of this proposal will be to develop a new set of verification tools, algorithms, and interfaces that enable secure, effective and unobtrusive management of users' private information. The proposed approach leverages formal verification techniques to ensure that the intended privacy properties and goals are met. Because of the modular and robust design of the proposed platform, it can be re-aligned and tuned to accommodate the needs of specific use cases and applications (e.g., health-care, connected automotive systems, and smart cities). The proposed system will: (1) use model-checking to ensure that updated rules and boundaries correctly enforce users' privacy intents, given that users' privacy boundaries and rules constantly evolve (e.g., due to aging, social pressure, and changes in health and personal relationships), (2) automatically translate control policies to privacy-preserving protocol executions, which provably enforce privacy intents. To achieve this, new approaches for activating privacy-preserving functionalities based on the knowledge of privacy rules and boundaries, as well as novel cryptographic tools will be used.For further information see the project web site at: http://hodamehrpouyan.com/privacy.html .