SaTC: CORE: Small: Collaborative: Tangible Privacy: User-Centric Sensor Designs for Assured Privacy

高保真度、通常侵犯隐私的传感器现在在我们的日常环境中变得无处不在。在家里，数字助理可以不断地听取指示，安全摄像头可以监视不寻常的活动。过去，一个人在自己家里的身体活动是私密的，而现在，联网的摄像头和麦克风可能会给一个人的身体行为带来电子隐私问题。偶尔的谈话和偶遇，曾经被认为是私人的、短暂的，现在可能会被捕捉、传播或存档。虽然这些传感设备以许多不同的方式使用户受益，因此它们受到欢迎，但它们的用户可能面临严重的隐私侵犯。当前传感设备的一个主要问题是，通常不清楚音频或视频传感器是否在空间占用者的视觉检查下关闭。例如，被黑客入侵的传感器可能确实会在未经用户同意的情况下记录用户，即使它们的接口（例如，小指示灯）声称它们是关闭的。该项目的目标是探索增强隐私的传感器设计，为人们提供知识和保证，让他们知道自己何时被记录，以及哪些数据被捕获和传播。虽然纯粹的软件机制可能无法激发信任，但物理机制（例如，相机的物理镜头盖）可以为人们提供更切实的隐私保证。该项目探索新颖的物理传感器设计，向人们传达一种清晰而明确的安全感，以保护他们的物理隐私。这个项目汇集了计算机安全和隐私、访问控制、人机交互和社会计算方面的专业知识。通过这个跨学科的团队，该项目通过以下方式对理论和实践做出了社会技术贡献：(1)了解人们在面对物理环境中增加的感知时的隐私问题、需求和行为；(2)探索硬件感知平台的设计空间，通过其物理外观和功能向人们传递有意义（“有形”）的隐私保证；(3)探索哪些信息通过网络发送的可视化指标；(4)探索替代传感器设计，以更高的隐私来权衡传感保真度。这些设计结合了硬件和软件技术，向受传感器影响的人们有形而直观地传达一种隐私感。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

High-fidelity, and often privacy-invasive, sensors are now becoming pervasive in our everyday environments. At home, digital assistants can constantly listen for instructions and security cameras can be on the lookout for unusual activity. Whereas once an individual's physical actions, in their own home, were private, now networked cameras and microphones can give rise to electronic privacy concerns for one's physical behaviors. Casual conversations and encounters, once thought to be private and ephemeral, now may be captured and disseminated or archived digitally. While these sensing devices benefit the users in many different ways, hence their popularity, their users may face serious privacy violations. A major problem with current sensing devices is that it is oftentimes unclear whether an audio or video sensor is, indeed, off upon visual inspection by occupants of a space. For example, sensors that have been hacked may indeed record people without their consent, even when their interfaces (e.g., small indicator lights) claim that they are off. The goal of this project is to explore privacy-enhanced sensor designs that provide people with the knowledge and assurance of when they are being recorded and what data is being captured and disseminated. Whereas purely software mechanisms may not inspire trust, physical mechanisms (e.g., a camera's physical lens cap) can provide a more tangible privacy guarantee to people. This project explores novel, physical designs of sensors that convey a clear and definite sense of assurance to people about their physical privacy. This project brings together expertise in computer security and privacy, access control, human computer interaction, and social computing. Through this interdisciplinary team, the project makes socio-technical contributions to both theory and practice by: (1) understanding the privacy concerns, needs, and behaviors of people in the face of increased sensing in physical environments; (2) exploring the design space for hardware sensing platforms to convey meaningful ('tangible') assurances of privacy to people by their physical appearance and function; (3) exploring visual indicators of what information is being sent over the network; and (4) exploring alternative sensor designs that trade off sensing fidelity for higher privacy. Together these designs combine hardware and software techniques to tangibly and visually convey a sense of privacy to people impacted by the sensors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.