SaTC: CORE: Medium: Collaborative: Toward Enforceable Data Usage Control in Cloud-based IoT Systems

在即将到来的物联网（IoT）演进中，预计数十亿设备将连接到互联网。虽然物联网承诺了一个更加连接和智能的世界，但这种普遍的大规模数据收集，存储，共享和分析引发了许多隐私问题。在当前的物联网生态系统中，物联网服务提供商完全控制收集的用户数据。他们将这些数据用于智能物联网系统和设备控制。他们还可以将数据用于未经用户同意的其他目的。该项目提出了一种新的数据使用控制框架PrivacyGuard，旨在使数据所有者能够完全控制其敏感数据的使用方式，以保护数据免受某些类型的隐私泄露。PrivacyGuard确保用户数据只能由用户批准的程序使用，并且每次使用数据都有不可否认的使用记录。来自代表性不足的少数群体的学生将参与研究活动。拟议的PrivacyGuard框架旨在通过无缝集成两种新技术来实现这一目标，即区块链智能合约和经证明的可信执行环境（TEE）。在这个项目中有四个关键的研究方向。第一个重点是物联网数据保护框架的设计，该框架与不同通信层的现有架构共存。第二个研究重点旨在开发新技术，通过利用硬件辅助TEE及其相关的证明技术，实现合同功能的离线保密执行。第三个重点是智能合约设计，以有效地嵌入用户定义的隐私政策和使用区块链的数据使用的可靠跟踪。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

In the upcoming evolution of the Internet of Things (IoT), it is anticipated that billions of devices will be connected to the Internet. While IoT promises a more connected and smarter world, this pervasive large-scale data collection, storage, sharing, and analysis raise many privacy concerns. In the current IoT ecosystem, IoT service providers have full control of the collected user data. They use the data for smart IoT system and device control. They could also use the data for other purposes not consented to by the users. This project proposes a novel data usage control framework, PrivacyGuard, that aims to empower data owners with full control over how their sensitive data is used so as to protect the data from certain types of privacy breaches. PrivacyGuard ensures that user data can only be used only by user-approved programs and each use of data has a non-repudiable usage record. Students from underrepresented minority groups will be involved in the research activities.The proposed PrivacyGuard framework aims to achieve this goal by seamlessly integrating two new technologies, smart contract over blockchain and attested trusted execution environment (TEE). There are four key research thrusts in this project. The first thrust focuses on the design of an IoT data protection framework that coexists with the existing architecture at different layers of communication. The second research thrust aims to develop novel techniques to enable the confidential execution of contract function off-chain, by exploiting hardware-assisted TEE and its associated attestation technologies. The third thrust focuses on smart contract designs to effectively embed user-defined privacy policies and trustworthy tracking of data usage using the blockchain. The last thrusts integrates the aforementioned components to develop an open-source framework prototype.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.