Databox: Privacy-Aware Infrastructure for Managing Personal Data

在不断发展的数字生态系统中建立隐私、信任和安全被广泛认为是一项关键的社会挑战。在美国、欧洲和日本的监管活动之外，还有一些行业举措，寻求重新平衡因广泛收集个人数据而引发的“信任危机”。各方一致认为，应对这一挑战的关键是加强问责制和控制。问责制不仅旨在加强合规性，而且还旨在使新兴的生态系统对消费者更加透明，而控制则旨在赋予消费者权力，并为他们提供积极行使选择权的手段。该提案将开发交付问责制和控制所需的底层技术基础设施。尽管个人数据管理通常被认为是一件非常私人的事情，但它本身也具有社交性：仅仅为了保护个人隐私而退出所有在线活动是不切实际的。现代互联网及其所支持的“免费”服务的成功在很大程度上取决于广告商和分析提供商赚钱的能力，结果是，取消或减少广告收入的方法注定要失败。实现个人数据管理的系统的许多动机和用途表明，需要一些工具，使个人能够更明确地控制其数据的收集和使用以及从其在线活动中推断出的信息，同时应对人类发展指数的挑战。通过与合作伙伴组织的合作，我们已经完善了这样一个工具的愿景，一个Databox，一个按需的个人数据聚合和查询点，直接由用户控制。Databox的愿景是一个开源的个人网络设备，由云托管服务增强，可以整理、管理和协调对我们个人数据的访问。Databox将启用，在某些情况下，甚至可能托管处理个人数据的第三方应用程序和服务。Databox将成为个人数据处理生态系统的核心，为管理对这些数据的安全访问提供平台，并使授权第三方能够在家庭环境外漫游时为所有者提供经过认证的服务。

Building privacy, trust and security into the evolving digital ecosystem is broadly recognized as a key societal challenge. Regulatory activities in the US, Europe and Japan are complemented by industry initiatives that seek to rebalance "the crisis in trust" occasioned by widespread personal data harvesting. All parties agree that key to this challenge are increased accountability and control. Accountability not only seeks to strengthen compliance but also make the emerging ecosystem more transparent to consumers, while control seeks to empower consumers and provide them with the means of actively exercising choice. This proposal will develop the underlying technology infrastructure required to deliver both accountability and control.Although personal data management is generally considered an intensely personal matter, it is also inherently social: it is impractical to withdraw from all online activity simply to protect one's privacy. The success of the modern Internet and the "free" services it supports largely rests on the ability for advertisers and analytics providers to make money with the result that approaches that remove or diminish advertising revenues have been doomed to failure. The many motivations and uses for systems enabling personal management of personal data point to a need for tools enabling individuals to take more explicit control over the collection and usage of their data and the information inferred from their online activities, while addressing the challenges of HDI.Working with partner organisations we have refined our vision of just such a tool, a Databox, an on-demand personal data aggregation and query point, control over which rests directly with the user. The Databox vision is of an open-source personal networked device augmented by cloud-hosted services that collates, curates, and mediates access to our personal data. The Databox will enable and, in some cases, may even host third party applications and services that process personal data. The Databox will form the heart of an individual's personal data processing ecosystem, providing a platform for managing secure access to these data and enabling authorised third parties to provide the owner with authenticated services while roaming outside the home environment.