Privacy-by-Design: Building Accountability into the Internet of Things

物联网(IoT)寻求将计算嵌入到平凡的物体中--药瓶、架子、磅秤等--并将这些“东西”连接到互联网，以实现一系列新的和改进的服务(例如，改进的医疗服务)。物联网将开放丰富的个人数据-生物数据，关于我们在家里的身体活动的数据，或者与家中物品的互动等-在互联网上无缝地分发这些数据。然而，个人数据的无缝分发给用户采用物联网带来了真正的挑战。个人数据并不是盲目地共享的，如果要实现物联网的预期好处，就需要了解如何使物联网中的个人数据交易可供用户观察和控制。换句话说，有必要了解需要做些什么来使物联网对用户负责，以便他们能够了解正在收集什么数据，正在对其做什么，以及由谁来实现个人数据管理。对责任的需求导致了对“表达工作”的担忧--即使个人数据交易可见并可供用户控制。这一奖学金旨在让行业和最终用户参与共同设计意识和控制机制，以具体说明支持发声工作的要求。它试图在家庭的背景下做到这一点--家庭是社会中最个人化的环境之一，也是未来收集个人数据的关键地点。行业正致力于开发使用案例，指定未来物联网应用程序，这些应用程序将在渗透到家庭的不同基础设施中利用个人数据。这些用例基于对当前基础设施接口和随之而来的个人数据交易模型的人种学研究。当前和未来的理解被结合在“挑衅类型”中--新技术安排的挑衅性模型--接受最终用户评估，以形成和完善围绕用户需求的表达机制，并培养用户对物联网的信任。

The Internet of Things (IoT) seeks to embed computation in mundane objects - pill bottles, shelves, weighing scales, etc. - and connect these 'things' to the internet to enable a broad range of new and improved services (e.g. improved healthcare services). The IoT will open up a wealth of personal data - biological data, data about our physical movements around the home, or interaction with objects therein, etc. - distributing it seamlessly across the internet. The seamless distribution of personal data presents real challenges to the adoption of the IoT by users, however. Personal data is not 'shared' blindly and there is need to understand how personal data transaction in the IoT can be made observable to users and available to their control if the projected benefits of the IoT are to come about. There is need, in other words, to understand what needs to be done to make the IoT accountable to users so that they can understand what data is being gathered, what is being done with it, and by whom, and to enable personal data management.The need for accountability leads to a concern with 'articulation work' - i.e., making personal data transactions visible and available to user control. This fellowship seeks to engage industry and end-users in the co-design of awareness and control mechanisms that specify requirements for the support of articulation work. It seeks to do so in the context of the home - one of the most personal of settings in society and a key site for future personal data harvesting. Industry is engaged in the development of use cases specifying future IoT applications that exploit personal data across different infrastructures penetrating the home. The use cases are grounded in ethnographic studies of current interfaces to infrastructure and the personal data transaction models that accompany them. Current and future understandings are combined in 'provotypes' - provocative mock ups of new technological arrangements - which are subject to end-user evaluation to shape and refine articulation mechanisms around user need and which foster user trust in the IoT.