CRII: SaTC: A System for Privacy Management in Ubiquitous Environments

随着移动和网络技术的激增，社会对网络空间中私人数据脆弱性的认识也在不断增强。保护私人信息变得尤为重要，因为研究人员估计，如果入侵者知道他们的邮政编码、性别和生日，87%的美国人可以通过姓名和地址被识别出来。本提案的目标是开发一套新的验证工具、算法和接口，以实现对用户私人信息的安全、有效和不显眼的管理。所建议的方法利用形式化验证技术来确保预期的隐私属性和目标得到满足。由于拟议平台的模块化和强大的设计，它可以重新调整和调整，以适应特定用例和应用程序（例如，医疗保健、联网汽车系统和智能城市）的需求。所提出的系统将：(1)使用模型检查来确保更新的规则和边界正确地执行用户的隐私意图，考虑到用户的隐私边界和规则不断发展（例如，由于老龄化，社会压力以及健康和人际关系的变化），(2)自动将控制策略转换为隐私保护协议的执行，这可证明是执行隐私意图的。为了实现这一目标，将使用基于隐私规则和边界知识的激活隐私保护功能的新方法，以及新颖的加密工具。欲了解更多信息，请参阅该项目的网站：http://hodamehrpouyan.com/privacy.html。

As mobile and network technologies proliferate, so does society's awareness of the vulnerability of private data within cyberspace. Protecting private information becomes specially important, since researchers estimate that 87% of Americans can be identified by name and address, if their zip code, gender, and birthday are known to intruders. The goal of this proposal will be to develop a new set of verification tools, algorithms, and interfaces that enable secure, effective and unobtrusive management of users' private information. The proposed approach leverages formal verification techniques to ensure that the intended privacy properties and goals are met. Because of the modular and robust design of the proposed platform, it can be re-aligned and tuned to accommodate the needs of specific use cases and applications (e.g., health-care, connected automotive systems, and smart cities). The proposed system will: (1) use model-checking to ensure that updated rules and boundaries correctly enforce users' privacy intents, given that users' privacy boundaries and rules constantly evolve (e.g., due to aging, social pressure, and changes in health and personal relationships), (2) automatically translate control policies to privacy-preserving protocol executions, which provably enforce privacy intents. To achieve this, new approaches for activating privacy-preserving functionalities based on the knowledge of privacy rules and boundaries, as well as novel cryptographic tools will be used.For further information see the project web site at: http://hodamehrpouyan.com/privacy.html .