Privacy in Context

上下文中的隐私

• 批准号: RGPIN-2017-03765
• 负责人: Barker, Ken
• 金额: $ 1.46万
• 依托单位: University of Calgary
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=710524
• 关键词: Privacy; Context

Privacy is about choice and context. Choice is critical because each individual must be able to define what they want to hold as private. Context defines the framework around which private information is shared and the limits on its use once it has been shared. Each individual will make different choices about what is private and will have multiple contexts in which the private information should be shared. Privacy preserving and aware data systems are needed that respect individual choice and allow the user to define variance arising as a result of different contexts. Data privacy must be defined analogously. Any data collected about us should be treated in conformance with individual preferences about the data (or ideally, and more generally, about whom the data is collected.) These preferences define the provider's choices about a data item's sensitivity, and when and with whom the data can be shared (context). Current privacy approaches either impose a generic privacy structure on any data collected and at best provide only an opt-in or opt-out participation model. Our approach argues that data should only be included in analyses activities if the user permits it as a personal choice. We are investigating end-to-end challenges associated with connecting context and choice with respect to data management. We identify three major novel contributions: First, we will develop a privacy commitment model that captures key aspects of data privacy including privacy meta-data and we will develop a new privacy ontology that explicitly captures individual preferences that allow for different uses based on context. Secondly, we will develop techniques that efficiently attach collected data to privacy commitments based on informed consent. The data and privacy commitments must be irrevocably attached. This will require new data processing paradigms and data structures capable of maintaining this tight linkage while permitting efficient data processing and analytics. A successful strategy will also facilitate better analytics because of increased data integrity thereby increasing utility. Thirdly, we will develop and/or adapt systems that process, store, and communicate data efficiently and in such a way that the linkage is never broken thereby guaranteeing the privacy commitments are honoured at each step of the process. We will investigate a number of different data collection paradigms to test our privacy model including sensor system (eg. IoT), web browsing activities, point-of-sales systems, smart utilities, and “big data” systems such as market analysis systems. Canadians highly value privacy as it is the cornerstone of modern democracies. Privacy protection has slowly degraded over the past two decades but its importance is now seen as a much higher priority issue. My work will develop systems that protect this value and do so by allowing individuals to control what about them should be held as private.

隐私是关于选择和背景的。选择是至关重要的，因为每个人都必须能够定义他们想拥有什么作为私人。上下文定义了共享私人信息的框架，以及一旦共享后对其使用的限制。每个人都会对什么是隐私做出不同的选择，并且会有多个环境来共享隐私信息。隐私保护和感知数据系统需要尊重个人的选择，并允许用户定义不同的情况下产生的差异。数据隐私必须以类似的方式定义。收集的关于我们的任何数据都应根据个人对数据的偏好（或者理想情况下，更普遍的是，关于收集数据的人）进行处理。这些首选项定义了提供者对数据项敏感性的选择，以及何时以及与谁共享数据（上下文）。 目前的隐私方法要么对收集的任何数据强加一个通用的隐私结构，最多只提供一个选择加入或选择退出的参与模型。我们的方法认为，数据应该只包括在分析活动中，如果用户允许它作为个人选择。我们正在调查与数据管理相关的连接上下文和选择相关的端到端挑战。我们确定了三个主要的新贡献：首先，我们将开发一个隐私承诺模型，捕捉数据隐私的关键方面，包括隐私元数据，我们将开发一个新的隐私本体，明确捕捉个人偏好，允许不同的使用基于上下文。其次，我们将开发技术，有效地将收集的数据附加到基于知情同意的隐私承诺中。数据和隐私承诺必须以可接受的方式附上。这将需要新的数据处理模式和数据结构，能够保持这种紧密的联系，同时允许有效的数据处理和分析。一个成功的战略还将促进更好的分析，因为增加了数据的完整性，从而增加了效用。第三，我们将开发和/或调整系统，以有效地处理，存储和通信数据，并确保联系永远不会中断，从而确保在流程的每一步都遵守隐私承诺。我们将研究一些不同的数据收集范例，以测试我们的隐私模型，包括传感器系统（例如，物联网），网页浏览活动，销售点系统，智能公用事业和“大数据”系统，如市场分析系统。 加拿大人高度重视隐私，因为它是现代民主的基石。在过去的二十年里，隐私保护已经慢慢退化，但它的重要性现在被视为一个更高的优先事项。我的工作将开发保护这种价值的系统，并通过允许个人控制他们应该作为私人持有的东西来实现这一点。