Towards a Solution to the Data Double Spending Problem

简介：个人数据收集可以改善影响我们生活的许多互动和体验，并使其个性化。然而，个人数据正在被获取、共享和用于次要目的(即，个人最初不被告知也不同意的目的)，其造成损害的可能性越来越大，例如将数据“武器化”用于破坏民主机构的社会概况。 无论是当前的公共或私营部门政策，还是遗留的技术系统，都不能很好地防止未经授权的个人数据二次使用。 释放更多数据驱动的个性化服务的潜力，同时提供更强大的数据保护，在于将研究扩展到区块链等新技术，这是一种分布式分类账技术，将确认和验证的交易集链接在一起，使篡改变得困难。区块链的新功能(例如，激励用户行为的标记化和共识机制)提供了潜在的解决方案。 文献综述：过去对隐私和区块链的研究主要集中在区块链平台用户身份的无意泄露、交易数据的无意曝光，以及利用区块链注册和跟踪用户指定的数据使用策略的遵守情况。这些研究中没有一项涉及如何防止未经授权的二次数据使用。 目标：因此，这项提案的短期目标将是进行研究，提出以下问题：如何将区块链技术与数字版权管理相结合，以防止而不仅仅是监控未经授权的数据二次使用？ 途径和方法：这项研究将建立在使用区块链技术保护隐私和安全数据共享的研究计划的基础上。它将在五年内分两个流程进行，重点关注三种利用区块链技术的能力来解决未经授权的辅助数据使用问题的战略：1)标记化(即权利的表示)，2)数字版权管理和2)旨在抑制未经授权的辅助数据使用的共识机制设计。Stream 1将采取经验性的方法，利用敏捷的软件开发，将符号化和数字版权管理相结合的原型设计神器；Stream 2将使用机制设计，在区块链试验台内将激励编码为共识算法。 HQP培训计划：大部分研究经费将支持1名博士、8名硕士和3名本科生。该研究小组在致力于公平、多样性和包容性方面有着良好的记录，并将与不列颠哥伦比亚大学的公平和包容性办公室合作，推动其在这一领域的工作。 影响：这项研究将为加拿大消费者提供更大的保护，提供HQP培训，并为加拿大行业合作伙伴提供解决方案，以增强其竞争力。

Introduction: Personal data collection can improve and individualize many of the interactions and experiences that impact our lives. However, personal data are being harvested, shared and used for secondary purposes (i.e., a purpose about which the individual was not originally informed and did not consent) in ways that have increasing potential to cause harm, such as “weaponizing” data for the social profiling that undermines democratic institutions. Neither current public or private sector policies nor legacy technological systems do much to protect against unauthorized secondary use of personal data. Unlocking the potential for more data-driven individualized services while delivering far more robust data protection lies in expanding research to novel technologies such as blockchains a distributed ledger technology where confirmed and validated sets of transactions are chained together to make tampering difficult. Blockchain's new capabilities (e.g., tokenization and consensus mechanisms that incentivize user behaviour) offer potential solutions. Literature Review: Past studies of privacy and blockchain focus on inadvertent leakage of the identity of blockchain platform users, inadvertent exposure of transaction data, and on the use of blockchain to register and track compliance with user-specified data usage policies. None of these studies address how to prevent unauthorized secondary data usage. Objectives: The short-term goal of this proposal therefore will be to conduct research that asks: how can blockchain technology, combined with digital rights management, be used to prevent rather than merely monitor unauthorized secondary use of data? Approach and Methodology: The research will build on a program of research on privacy-preserving and secure data sharing using blockchain technology. It will be conducted over five years in two streams focusing on three strategies that leverage the capabilities of blockchain technology to address the problem of unauthorized secondary data usage: 1) tokenization (i.e., a representation of entitlements), 2) digital rights management and 2) consensus mechanism design to disincentivize unauthorized secondary data usage. Stream 1 will take an empirical approach, employing agile software development to prototype design artefacts combining tokenization with digital rights management; Stream 2 will use mechanism design to encode incentives into consensus algorithms within blockchain test beds. HQP Training Plan: The bulk of the research funding will support 1 PhD, 8 MSc and 3 undergraduate students. The research team has a demonstrated track record of commitment to Equity, Diversity and Inclusion, and will work with UBC's Equity and Inclusiveness Office to advance its work in this area. Impact: This research will provide significantly greater protection for Canadian consumers, provide HQP training, and offer solutions to Canadian industry partners that will enhance their competitiveness.