UPRISE-IoT: User-centric PRIvacy & Security in IoT

该项目的目标是允许用户控制周围物联网（IoT）设备生成和收集的数据。由于物联网将在我们的日常活动中无处不在，我们的隐私可能面临风险。与此同时，如果从一开始就不将隐私视为基本设计目标，物联网技术的部署可能会停止或放缓。总的来说，由于这些原因，我们认为物联网采用隐私设计方法至关重要。该项目将通过考虑以用户为中心的方法重新审视物联网隐私空间。它将以用户为中心，考虑用户的行为和背景，以保护隐私的方式提高安全性和隐私。该方法还将提高数据透明度和控制。用户将被告知以用户友好的方式收集的数据，并可以选择反对收集数据。我们计划开发一种解决方案，提供控制物联网世界中数据隐私的工具。因此，我们相信该项目将提高用户的新意识，使用户的行为不会危及他们的安全，也有利于创造一个基于物联网数据货币化的新市场。预期的结果是创造一个以用户为中心的新的安全空间，其中安全解决方案直接集成在物联网设备中（创建智能安全对象）或通过强大的用户友好的移动的应用程序提供给用户，用于：（i）“智能化”本质上不安全的物联网设备，（ii）微调隐私级别;（iii）了解他们的行为，以保护他们免受安全和隐私威胁，（iv）了解他们的信息的价值。我们将通过涉及用户的实验工作来验证我们的结果。我们计划采用混合定量/定性方法来解决这个问题：我们将调查用户对安全的看法，并衡量用户数据的真实的保护水平。

The goal of this project is to allow users to gain control over data generated and collected by the Internet of Things (IoT) devices surrounding them. Since the IoT will be omnipresent in our day-to-day activities, our privacy is potentially at risk. At the same time, the deployment of IoT technologies might be stopped or slowed-down if privacy is not considered from the beginning as a fundamental design objective. In general, for these reasons, we believe that it is essential to adopt a privacy-by-design approach for the IoT.This project will take a fresh look at the IoT privacy space by considering a user-centric approach. It will be user-centric by considering user's behaviour and context in order to improve security and privacy in a privacy-preserving manner. The approach will also increase data transparency and control. Users will be informed about the data that is being collected in a user-friendly manner, and will have the option to oppose to its collection. We plan to develop a solution that will offer tools for controlling data privacy in the IoT world. Therefore, we believe that the project will raise a new awareness in the users, so that users' behaviour will not compromise their security, favouring also the creation of a new market based on the monetization of IoT data.The expected result is the creation of a new secure space centred around the user where security solutions are either integrated within IoT devices directly (creating smart secure objects) or made available to the user by powerful user-friendly mobile applications for: (i) "smartifying" the IoT devices that are not intrinsically secure, (ii) fine-tuning the level of privacy; (iii) getting awareness of their behaviour for being protected from security and privacy threats, (iv) getting awareness of the value of their information.We will validate our results with experimental work involving users. We plan to adopt a mixed quantitative/qualitative approach to the problem: we will both survey users' perception of security, as well as measure the real level of protection of users' data.