Collaborative Research: CNS Core: Medium: The Privacy Backplane - A Full Stack Approach to Individualized Privacy Controls Throughout the Internet-of-Things

该项目的目标是开发一种技术，使个人能够在一个传感器丰富的世界中控制自己的隐私策略和数据，但使使用这些数据的应用程序能够在这些限制下运行。该项目特别关注未来的环境，如零售环境、医疗设施，甚至公共空间，在这些环境中，不同参与者的数据收集和隐私利益显然需要得到解决。该项目将研究和开发必要的概念和基础设施，以安全可信的方式支持大规模传感环境中隐私和数据访问的用户需求，确保策略和功能需求的实现。该项目的基础将是“隐私背板”的架构，这是一个可信的分布式系统，旨在执行用户自定义的隐私策略，允许用户决定如何使用收集到的关于他们的数据，同时执行需要访问这些数据的应用程序元素。该项目将在物理环境的每个组件中植入隐私保护，从传感器本身，通过（无线）网络和边缘，一直到云中的数据存储和处理系统。该项目明确考虑了低功耗物联网设备隐私政策执行的效率影响。最后，本项目将利用安全硬件体系结构的最新进展来有效地实现可信赖的系统。隐私权和控制个人信息的权利是我们这个时代的核心问题，发展有效的机制来保护个人隐私现在是许多社会的优先事项；它已被美国政府确定为战略重点。随着越来越便宜的传感器提供快速增长的监控能力，许多组织、公司和政府机构正在部署几乎没有限制的先进监控和监控环境。同时，分布式物理传感器基础设施使重要的新应用能够带来个人和社会效益。然而，大部分匿名公司和政府实体不断收集个人数据已经引起了普通民众的极大关注。该项目旨在开发一条公平竞争的道路，允许用户更直接地控制谁可以收集、访问和存储他们的数据，以及这些数据的使用方式。此外，该项目将设法提高数据收集和使用的透明度。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The goal of this project is to develop technologies that put individuals in control of their privacy policies and data in a sensor-rich world, but enable applications that consume these data to operate within these constraints. In particular, this project focuses on future environments, such as retail contexts, healthcare facilities, and even public spaces, where the data collection and privacy interests of different actors clearly need to be resolved. This project will study and develop the concepts and infrastructure necessary to support enforcement of user requirements for privacy and data access within large-scale sensing environments in a secure and trusted way that ensures policy and functionality requirements are achieved. The foundation of the project will be an architecture for a “Privacy Backplane,” a trusted distributed system designed to enforce user-defined privacy policies that allow users to dictate how data collected about them are used, while simultaneously executing the elements of applications that need access to these data. This project will instill privacy protection throughout every component of a physical environment from sensors themselves, through the (wireless) network and edge, all the way to data storage and processing systems in the cloud. The project explicitly considers the efficiency implications of privacy policy enforcement for low-power Internet-of-Things devices. Finally, this project will leverage recent advances in secure hardware architectures to implement a trustworthy system efficiently. The right to privacy and control over one’s personal information is a core issue of our time and developing effective mechanisms to protect personal privacy is now a priority in many societies; it has been identified as a strategic priority by the U.S. government. As ever cheaper sensors deliver rapidly increasing surveillance capabilities, many organizations, companies, and governmental institutions are deploying advanced surveillance and monitoring environments with few constraints. At the same time, distributed physical sensor infrastructures enable important new applications that may bring individual and social benefits. However, the constant collection of personal data by largely anonymous companies and governmental entities has caused a significant amount of concern among the general populace. This project seeks to develop a path towards leveling the playing field that will allow users to exert more direct control over who may collect, access, and store data on them, as well as the ways these data are used. Additionally, the project will seek to increase the level of transparency for data collection and use.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.