Privacy-by-Design: Building Accountability into the Internet of Things

物联网（IoT）试图将计算嵌入到普通物体中-药瓶，货架，称重秤等-并将这些“东西”连接到互联网，以实现广泛的新的和改进的服务（例如改进的医疗保健服务）。物联网将开放大量的个人数据-生物数据，有关我们在家中的物理运动或与其中对象的交互等的数据-将其无缝地分布在互联网上。然而，个人数据的无缝分发对用户采用物联网提出了真实的挑战。个人数据不是盲目地“共享”的，如果要实现物联网的预期效益，就需要了解物联网中的个人数据交易如何能够被用户观察到并可供他们控制。换句话说，有必要了解需要做些什么来使物联网对用户负责，以便他们可以了解正在收集什么数据，正在使用它做什么，以及由谁来实现个人数据管理。对问责制的需求导致了对“衔接工作”的关注-即，使个人数据交易可见并可供用户控制。该研究金旨在让工业界和最终用户参与共同设计宣传和控制机制，这些机制具体规定了支持衔接工作的要求。它试图在家庭的背景下这样做-这是社会中最私人的环境之一，也是未来个人数据收集的关键场所。行业正在开发用例，指定未来的物联网应用程序，这些应用程序利用贯穿家庭的不同基础设施中的个人数据。这些用例基于对当前基础设施接口和伴随它们的个人数据交易模型的人种学研究。当前和未来的理解结合在“provotypes”中-新技术安排的挑衅性模型-这取决于最终用户评估，以围绕用户需求塑造和完善衔接机制，并促进用户对物联网的信任。

The Internet of Things (IoT) seeks to embed computation in mundane objects - pill bottles, shelves, weighing scales, etc. - and connect these 'things' to the internet to enable a broad range of new and improved services (e.g. improved healthcare services). The IoT will open up a wealth of personal data - biological data, data about our physical movements around the home, or interaction with objects therein, etc. - distributing it seamlessly across the internet. The seamless distribution of personal data presents real challenges to the adoption of the IoT by users, however. Personal data is not 'shared' blindly and there is need to understand how personal data transaction in the IoT can be made observable to users and available to their control if the projected benefits of the IoT are to come about. There is need, in other words, to understand what needs to be done to make the IoT accountable to users so that they can understand what data is being gathered, what is being done with it, and by whom, and to enable personal data management.The need for accountability leads to a concern with 'articulation work' - i.e., making personal data transactions visible and available to user control. This fellowship seeks to engage industry and end-users in the co-design of awareness and control mechanisms that specify requirements for the support of articulation work. It seeks to do so in the context of the home - one of the most personal of settings in society and a key site for future personal data harvesting. Industry is engaged in the development of use cases specifying future IoT applications that exploit personal data across different infrastructures penetrating the home. The use cases are grounded in ethnographic studies of current interfaces to infrastructure and the personal data transaction models that accompany them. Current and future understandings are combined in 'provotypes' - provocative mock ups of new technological arrangements - which are subject to end-user evaluation to shape and refine articulation mechanisms around user need and which foster user trust in the IoT.