SaTC: CORE: Small: Collaborative: Tangible Privacy: User-Centric Sensor Designs for Assured Privacy

高保真，而且经常侵犯隐私的传感器现在正在我们的日常环境中变得无处不在。在家里，数字助理可以不断地监听指令，安全摄像头可以监视不寻常的活动。曾经，个人在自己家里的身体行为是私人的，但现在联网的摄像头和麦克风可能会引起对个人身体行为的电子隐私的担忧。曾经被认为是私密和短暂的随意对话和会面，现在可能会被捕捉并传播或以数字方式存档。虽然这些传感设备以许多不同的方式使用户受益，因此它们很受欢迎，但它们的用户可能面临严重的隐私侵犯。目前的传感设备的一个主要问题是，通常不清楚音频或视频传感器是否真的在空间居住者的视觉检查时关闭。例如，被黑客入侵的传感器确实可能在未经人的同意的情况下记录下他们，即使他们的接口(例如，小指示灯)声称他们关闭了。该项目的目标是探索隐私增强型传感器设计，为人们提供有关他们何时被记录以及正在捕获和传播哪些数据的知识和保证。纯软件机制可能不会激发信任，而物理机制(例如，相机的物理镜头盖)可以为人们提供更切实的隐私保障。该项目探索了传感器的新颖物理设计，向人们传达了一种明确的物理隐私保证感。该项目汇集了计算机安全和隐私、访问控制、人机交互和社会计算方面的专业知识。通过这个跨学科团队，该项目为理论和实践做出了社会技术贡献：(1)了解面对物理环境中日益增强的感知的人们的隐私关切、需求和行为；(2)探索硬件传感平台的设计空间，以通过他们的物理外观和功能向人们传达有意义的(‘有形的’)隐私保证；(3)探索通过网络发送什么信息的视觉指示器；以及(4)探索替代的传感器设计，以牺牲感知的保真度来获得更高的隐私。这些设计结合了硬件和软件技术，以有形和可视的方式向受传感器影响的人传达一种隐私感。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

High-fidelity, and often privacy-invasive, sensors are now becoming pervasive in our everyday environments. At home, digital assistants can constantly listen for instructions and security cameras can be on the lookout for unusual activity. Whereas once an individual's physical actions, in their own home, were private, now networked cameras and microphones can give rise to electronic privacy concerns for one's physical behaviors. Casual conversations and encounters, once thought to be private and ephemeral, now may be captured and disseminated or archived digitally. While these sensing devices benefit the users in many different ways, hence their popularity, their users may face serious privacy violations. A major problem with current sensing devices is that it is oftentimes unclear whether an audio or video sensor is, indeed, off upon visual inspection by occupants of a space. For example, sensors that have been hacked may indeed record people without their consent, even when their interfaces (e.g., small indicator lights) claim that they are off. The goal of this project is to explore privacy-enhanced sensor designs that provide people with the knowledge and assurance of when they are being recorded and what data is being captured and disseminated. Whereas purely software mechanisms may not inspire trust, physical mechanisms (e.g., a camera's physical lens cap) can provide a more tangible privacy guarantee to people. This project explores novel, physical designs of sensors that convey a clear and definite sense of assurance to people about their physical privacy. This project brings together expertise in computer security and privacy, access control, human computer interaction, and social computing. Through this interdisciplinary team, the project makes socio-technical contributions to both theory and practice by: (1) understanding the privacy concerns, needs, and behaviors of people in the face of increased sensing in physical environments; (2) exploring the design space for hardware sensing platforms to convey meaningful ('tangible') assurances of privacy to people by their physical appearance and function; (3) exploring visual indicators of what information is being sent over the network; and (4) exploring alternative sensor designs that trade off sensing fidelity for higher privacy. Together these designs combine hardware and software techniques to tangibly and visually convey a sense of privacy to people impacted by the sensors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.