SaTC: CORE: Small: Managing Privacy and Environment for Used and End-of-Life Electronic Devices

新冠肺炎的流行加速了向更多远程工作和移动工作的过渡。这意味着个人设备和家庭网络已经从偶尔的专业用途转变为普遍的专业用途，现在可以被归类为关键基础设施。因此，管理这些网络的安全是国家的优先事项。物联网的发展导致消费者拥有越来越多的设备，可以获得个人视频、音频和其他信息。如果被处置的设备仍然包含敏感数据并最终落入坏人手中，那么报废设备将带来巨大的安全风险。数据安全对可持续发展也很重要：担心隐私的消费者可能会存储或回收设备，而不是为了重复使用而出售。许多上交回收的设备没有被重复使用，因为设备和数据不容易为新用户清除。减少再利用会对经济、社会和环境产生影响。因此，数据安全和使用结束从根本上是相互交织在一起的，但目前对它们的理解和管理很差。该项目涉及综合研究和推广活动，以更好地了解和管理家用设备上的数据隐私。对于一系列物联网和其他家用消费电子产品，消费者会接受隐私和使用结束行为调查。对存储在不同设备上的个人身份信息进行隐私风险评估和分析。评估数据擦除协议的可用性，以澄清从不同设备删除个人数据有多容易和有效。这些活动的结果导致构建了一个模型，预测不同消费者群体的安全和使用结束行为。该模型用于建议有效的干预措施，以改善隐私和可持续结果，例如提高擦除协议的可用性或教育消费者。外展是为了支持决策，例如，将研究成果带给行业中的利益相关者和参与标准制定的消费者团体。例如，通过iFixit网站，编写并广泛分发了一份关于安全和使用结束的消费者指南。K-12夏令营是为代表不足群体的高中生举办的。本科生和研究生将参与隐私评估和可用性评估。为Imagine RIT开发了一个关于安全和使用终止的展览，这是一个一年一度的活动，吸引了数以万计的罗切斯特居民来到校园。这个奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The COVID-19 pandemic accelerated the transition towards increased telework and mobile working. This implies that personal devices and home networks have moved from occasional to pervasive professional use, and can now be classified as critical infrastructure. Managing the security of these networks is thus a national priority. Progress towards the Internet-of-Things leads to consumers owning an expanding array of devices privy to personal video, audio and other information. End-of-life poses a large security risk if disposed-of devices still contain sensitive data and end up in the wrong hands. Data security is also important for sustainability: A consumer concerned about privacy may store a device or recycle it, instead of selling for reuse. Many devices turned in for recycling are not reused because the device and data cannot readily be cleared for a new user. Decreased reuse has economic, social and environmental impacts. Data security and end-of-use are thus fundamentally intertwined, but currently poorly understood and managed. This project involves integrated research and outreach activities to better understand and manage the privacy of data on home devices. For a set of Internet-of-Things and other home consumer electronics, consumers are surveyed on privacy and end-of-use behaviors. Personally Identifiable Information stored on different devices is assessed and analyzed for privacy risk. The usability of data wiping protocols is evaluated to clarify how easy and effective it is to remove personal data from different devices. The results from these activities leads to construction of a model predicting security and end-of-use behaviors for different consumer groups. This model is used to suggest effective interventions to improve privacy and sustainability outcomes, e.g. improving the usability of wiping protocols or educating consumers. Outreach is done to support decision-making, for example research results are brough to stakeholders in industry and consumer groups engaged in standard development. A consumer guide to security and end-of-use is developed and distributed widely, e.g. through the iFixit website. K-12 summer camps are held for high school students from under-represented groups. Undergraduate and graduate students will be engaged in the privacy assessment and usability evaluations. An exhibit on security and end-of-use is developed for Imagine RIT, an annual event that brings tens of thousands of Rochester residents to campus.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.