SaTC: CORE: Small: Managing Privacy and Environment for Used and End-of-Life Electronic Devices

SaTC：核心：小型：管理废旧电子设备的隐私和环境

• 批准号: 2037535
• 负责人: Eric Williams
• 金额: $ 49.6万
• 依托单位: Rochester Institute of Tech
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-06-15 至 2024-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2037535&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Managing; Privacy

The COVID-19 pandemic accelerated the transition towards increased telework and mobile working. This implies that personal devices and home networks have moved from occasional to pervasive professional use, and can now be classified as critical infrastructure. Managing the security of these networks is thus a national priority. Progress towards the Internet-of-Things leads to consumers owning an expanding array of devices privy to personal video, audio and other information. End-of-life poses a large security risk if disposed-of devices still contain sensitive data and end up in the wrong hands. Data security is also important for sustainability: A consumer concerned about privacy may store a device or recycle it, instead of selling for reuse. Many devices turned in for recycling are not reused because the device and data cannot readily be cleared for a new user. Decreased reuse has economic, social and environmental impacts. Data security and end-of-use are thus fundamentally intertwined, but currently poorly understood and managed. This project involves integrated research and outreach activities to better understand and manage the privacy of data on home devices. For a set of Internet-of-Things and other home consumer electronics, consumers are surveyed on privacy and end-of-use behaviors. Personally Identifiable Information stored on different devices is assessed and analyzed for privacy risk. The usability of data wiping protocols is evaluated to clarify how easy and effective it is to remove personal data from different devices. The results from these activities leads to construction of a model predicting security and end-of-use behaviors for different consumer groups. This model is used to suggest effective interventions to improve privacy and sustainability outcomes, e.g. improving the usability of wiping protocols or educating consumers. Outreach is done to support decision-making, for example research results are brough to stakeholders in industry and consumer groups engaged in standard development. A consumer guide to security and end-of-use is developed and distributed widely, e.g. through the iFixit website. K-12 summer camps are held for high school students from under-represented groups. Undergraduate and graduate students will be engaged in the privacy assessment and usability evaluations. An exhibit on security and end-of-use is developed for Imagine RIT, an annual event that brings tens of thousands of Rochester residents to campus.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

COVID-19疫情加速了向远程办公和移动的工作的过渡。这意味着个人设备和家庭网络已经从偶尔使用转变为普遍的专业用途，现在可以被归类为关键基础设施。因此，管理这些网络的安全是国家的优先事项。物联网的发展导致消费者拥有越来越多的设备来获取个人视频、音频和其他信息。如果被丢弃的设备仍然包含敏感数据并最终落入坏人之手，则寿命终止会带来很大的安全风险。数据安全对于可持续性也很重要：担心隐私的消费者可能会存储设备或回收设备，而不是出售以供重复使用。许多被回收的设备没有被重复使用，因为设备和数据不能很容易地为新用户清除。减少再利用具有经济、社会和环境影响。因此，数据安全和最终使用从根本上相互交织在一起，但目前对它们的理解和管理都很差。该项目涉及综合研究和推广活动，以更好地了解和管理家庭设备上的数据隐私。对于一组物联网和其他家用消费电子产品，消费者对隐私和最终使用行为进行了调查。存储在不同设备上的个人身份信息会被评估和分析隐私风险。评估数据擦除协议的可用性，以澄清从不同设备中删除个人数据的简单性和有效性。这些活动的结果导致构建一个模型，预测不同消费者群体的安全性和最终使用行为。该模型用于建议有效的干预措施，以改善隐私和可持续性成果，例如提高擦除协议的可用性或教育消费者。开展外联活动以支持决策，例如，将研究成果提供给参与标准制定的行业和消费者团体的利益攸关方。制定并通过iFixit网站等途径广泛分发安全和最终使用消费者指南。K-12夏令营是为来自代表性不足群体的高中生举办的。本科生和研究生将参与隐私评估和可用性评估。一个关于安全和最终使用的展览是为Imagine RIT开发的，这是一个每年都会吸引成千上万罗切斯特居民到校园的活动。这个奖项反映了NSF的法定使命，并被认为是值得通过使用基金会的知识价值和更广泛的影响审查标准进行评估来支持的。