TC:Medium:Collaborative Research: Mobile Personal Privacy and Security - A New Framework and Technology to Account for Human Values

该奖项是根据2009年美国复苏和再投资法案（公法111-5）资助的。在保障流动电子设备不同程度私隐的同时，实施保安的技术解决方案已取得重大进展。一个很大程度上未解决的问题包括知道在什么情况下实现什么类型的技术解决方案。之所以会出现这种挑战，是因为在现实中通常不存在明确的“最佳”或“正确”解决方案。看待这个问题的一种方法是关注这样一个事实，即这些设备可能在人们的生活中扮演着不可或缺的角色，并影响着重要的人类价值观：当然是安全和隐私，但也影响着其他价值观，如自主、信任和身体健康。此外，这些价值观往往处于紧张状态。该项目将开发一个原则性和系统性的概念框架，以未来移动设备的两个典型例子：植入式医疗设备和移动电话安全应用程序为背景，分析这些价值含义和紧张关系。我们的方法的一个关键组成部分将是应用和扩展价值敏感设计理论和方法。研究人员将开发和评估新技术，并与一系列利益相关者进行实证工作，包括期货研讨会和半结构化访谈。预期结果包括一个框架，用于分析隐私、安全、自治和移动设备的其他价值之间的关系和权衡，这些价值既考虑了这些价值的情境维度，也考虑了这些价值的具体维度；针对这些问题提出了一系列关键技术解决方案；一组案例研究；最后设计建议供其他研究人员和实践者使用。这项工作的结果不仅将发展为新的移动技术提供“正确”级别的安全和隐私的技术机制，而且可以帮助影响在更广泛的目标和价值观背景下对“正确”含义的定义。在更广泛的社会中，有越来越多的技术使用集中在这里：植入式医疗设备和用于个人安全的高性能手机。改善人类健康和人身安全，同时不显著破坏隐私、信任和自主等其他关键价值，将对此类技术的发展至关重要。预计分析这些问题的方法也将适用于其他技术，如个人物品上的射频识别标签、支付过路费或交通费的智能卡等。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).Significant progress has been made on technical solutions for implementing security while preserving varying degrees of privacy for mobile electronic devices. A largely unsolved problem involves knowing what type of technical solutions to implement and under what circumstances. This challenge arises because in actuality there is in general no such thing as a clear "optimal" or "right" solution. One way to view this problem is by focusing on the fact that such devices potentially play an integral role in people's lives and impact important human values: security and privacy of course, but also other values such as autonomy, trust, and physical well-being. Further, these values are often in tension. This project will develop a principled and systematic conceptual framework for analyzing these value implications and tensions in the context of two archetypical examples of future mobile devices: implantable medical devices and mobile phone safety applications. A key component of our approach will be the application and extension of the Value Sensitive Design theory and methodology. Researchers will develop and evaluate new technology, as well as undertake empirical work with a range of stakeholders, including Futures Workshops and semi-structured interviews. Expected outcomes include a framework for analyzing the relationships and trade-offs among privacy, security, autonomy, and other values for mobile devices that accounts for both situational and embodied dimensions of these values; a pallet of key technical solutions to these problems; a set of case studies; and finally design recommendations for use by other researchers and practitioners.Results of this work will not only develop technical mechanisms for providing the "right" level of security and privacy for new mobile technologies, but can help influence the definition of what "right" means in the context of the broader set of goals and values. In society more generally, there is an increasing use of technologies that are focused upon here: implantable medical devices and highly capable cell phones used for personal safety. Improving human health and personal safety, while not significantly undermining other key values such as privacy, trust, and autonomy, will be important in the development of such technologies. It is anticipated that the ways of analyzing such problems will be applicable to other technologies as well, such as RFID tags on personal possessions, Smart Cards for paying for tolls or transit fares, and many others.