Collaborative Research: CNS Core: Medium: The Privacy Backplane - A Full Stack Approach to Individualized Privacy Controls Throughout the Internet-of-Things

该项目的目标是开发技术，使个人在传感器丰富的世界中控制他们的隐私政策和数据，但使使用这些数据的应用程序能够在这些约束条件下运行。特别是，该项目侧重于未来的环境，如零售环境，医疗保健设施，甚至公共空间，其中不同参与者的数据收集和隐私利益显然需要解决。该项目将研究和开发必要的概念和基础设施，以安全和可信的方式支持在大规模传感环境中执行用户对隐私和数据访问的要求，确保实现政策和功能要求。该项目的基础将是一个“隐私背板”的架构，这是一个可信的分布式系统，旨在执行用户定义的隐私策略，允许用户决定如何使用收集到的关于他们的数据，同时执行需要访问这些数据的应用程序的元素。该项目将在物理环境的每个组件中灌输隐私保护，从传感器本身，通过（无线）网络和边缘，一直到云中的数据存储和处理系统。该项目明确考虑了低功耗物联网设备隐私政策执行的效率影响。最后，这个项目将利用安全硬件架构的最新进展，有效地实现一个值得信赖的系统。隐私权和对个人信息的控制权是我们这个时代的核心问题，发展有效的机制来保护个人隐私现在是许多社会的优先事项;它已被美国政府确定为战略优先事项。随着越来越便宜的传感器提供快速增长的监控能力，许多组织，公司和政府机构正在部署先进的监控和监控环境，几乎没有限制。与此同时，分布式物理传感器基础设施能够实现重要的新应用，这些应用可能带来个人和社会效益。然而，基本上匿名的公司和政府实体不断收集个人数据，引起了公众的极大关注。该项目旨在开发一条通往公平竞争环境的道路，允许用户对谁可以收集，访问和存储数据以及使用这些数据的方式进行更直接的控制。此外，该项目将寻求提高数据收集和使用的透明度。该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的知识价值和更广泛的影响审查标准进行评估。

The goal of this project is to develop technologies that put individuals in control of their privacy policies and data in a sensor-rich world, but enable applications that consume these data to operate within these constraints. In particular, this project focuses on future environments, such as retail contexts, healthcare facilities, and even public spaces, where the data collection and privacy interests of different actors clearly need to be resolved. This project will study and develop the concepts and infrastructure necessary to support enforcement of user requirements for privacy and data access within large-scale sensing environments in a secure and trusted way that ensures policy and functionality requirements are achieved. The foundation of the project will be an architecture for a “Privacy Backplane,” a trusted distributed system designed to enforce user-defined privacy policies that allow users to dictate how data collected about them are used, while simultaneously executing the elements of applications that need access to these data. This project will instill privacy protection throughout every component of a physical environment from sensors themselves, through the (wireless) network and edge, all the way to data storage and processing systems in the cloud. The project explicitly considers the efficiency implications of privacy policy enforcement for low-power Internet-of-Things devices. Finally, this project will leverage recent advances in secure hardware architectures to implement a trustworthy system efficiently. The right to privacy and control over one’s personal information is a core issue of our time and developing effective mechanisms to protect personal privacy is now a priority in many societies; it has been identified as a strategic priority by the U.S. government. As ever cheaper sensors deliver rapidly increasing surveillance capabilities, many organizations, companies, and governmental institutions are deploying advanced surveillance and monitoring environments with few constraints. At the same time, distributed physical sensor infrastructures enable important new applications that may bring individual and social benefits. However, the constant collection of personal data by largely anonymous companies and governmental entities has caused a significant amount of concern among the general populace. This project seeks to develop a path towards leveling the playing field that will allow users to exert more direct control over who may collect, access, and store data on them, as well as the ways these data are used. Additionally, the project will seek to increase the level of transparency for data collection and use.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.