TAPESTRY: Trust, Authentication and Privacy over a DeCentralised Social Registry

TAPE的目的是调查，开发和展示变革性的新技术，使人们，企业和数字服务能够安全地在线连接，利用他们日常数字交互编织的多模态信号的复杂“挂毯”;他们的数字人格。通过这种方式，我们将降低数字经济的风险，提供全新的方式来确定或产生在线信任，并使用户和企业能够更好地决定他们在网上信任谁。在线欺诈和诈骗每年给英国经济造成6.7亿英镑的损失;犯罪通常通过虚假身份实施。当人员和服务的数字身份通过名称或地址呈现时，很难做出关于信任谁的正确决策。我们怎么能相信我们今天与之互动的身份不是昨天凭空创造出来的骗局呢？或者我们注册个人数据的服务是否值得信赖？在一个用户管理多个数字身份的时代，这些数字身份在其物理寿命期间不断演变，并且即将能够在提供商之间迁移身份（其中大多数居住在欧盟以外），迫切需要分散的技术来证明希望在数字经济中安全交互的人和服务之间的信任。TAPE将与最终用户共同创建和评估原型服务，以确定在线行为和信任态度如何在可信的去中心化技术的存在下发展，以证明在线身份的真实性。TAPEVPN建议在选择加入的基础上收集用户交互的数字痕迹（共享的照片，留下的评论，“喜欢”的帖子，与物联网设备交互）作为分散数据库（区块链）中的加密信任证据。用户授权第三方在给定的时间段内以给定的粒度访问信任证据，以便通过其数字人格证明其身份的可信度。例如，众筹者可能会邀请新的支持者提交2年的定期社交媒体互动历史，以防止临时身份的欺诈性承诺。社区论坛对情感支持和福祉越来越重要。类似的检查可以防止拖钓，或者身份发布建议可以在其区块链中收集正面评级，从而可以审查其声誉。从技术角度来看，该项目将开发去中心化的基础设施，以利用通过机器学习从社交媒体和物联网交互中聚合的多模态信号来理解大量的数字交互。此外，还需要新的加密策略来保护信任证据的隐私，并在粒度基础上传播访问。从人机交互和协同设计的角度来看，信任服务的发展以及将数字人格和互动历史作为信任证据的转变将开辟新的领域，从根本上改变用户对身份和在线互动的看法。为了开展这个大胆而雄心勃勃的项目，我们建立了战略性的多学科合作伙伴关系，将多模态信号处理和机器学习（CVSSP）领域的世界领先团队联合起来，CVSSP是BIS/GCHQ认可的网络安全（SCCS）卓越中心，是英国首个也是唯一一个下一代移动的和物联网的5G测试平台。（ICS/5GIC），并反映了与最终用户紧密结合共同设计和评估技术的重要性，两个领先的英国社会数字交互（DJCAD）和交互设计（UNN）团体。参与TAPE的共同设计和评估的最终用户合作伙伴涵盖了技术，法律的，社会改革、卫生和福利以及商业部门。

The aim of TAPESTRY is to investigate, develop and demonstrate transformational new technologies to enable people, businesses and digital services to connect safely online, exploiting the complex "tapestry" of multi-modal signals woven by their everyday digital interactions; their Digital Personhood. In this way we will de-risk the Digital Economy, delivering completely new ways of determining or engendering trust online, and enabling users and businesses to make better decisions about who they trust online.Online fraud and scams cost the UK economy £670m each year; crimes often perpetrated through false identities. It is difficult to make good decisions about who to trust when the digital identities of people and services are presented through pseudonyms or addresses. How can we trust that the identity we are interacting with today wasn't created out of thin air yesterday to pull a scam? Or whether the service we are registering our personal data with is trustworthy? In an era of users curating multiple digital identities that evolve over their physical lifespan, and the coming ability to migrate identities between providers (most of whom reside outside the EU), there is an urgent need for decentralised technologies to enable proofs of trust between people and services wishing to interact safely within the Digital Economy. TAPESTRY will co-create and evaluate prototype services with end-users to determine how online behaviour and attitudes to trust could evolve in the presence of a trusted decentralised technology to prove the veracity of online identities. TAPESTRY proposes to collect, on an opt-in basis, digital trails of users' interactions (photos shared, comments left, posts 'liked', IoT devices interacted with) as encrypted trust evidence within a decentralised database (blockchain). Users grant third parties access to trust evidence for a given time period and at a given granularity, in order to prove trustworthiness of their identity via their digital personhood. For example, a crowd-funder might invite new backers to submit 2 years' history of regular social media interactions to guard against fraudulent pledging from transient identities. Community forums are becoming increasingly important for emotional support and well-being. A similar check could safeguard against trolling, or an identity posting advice could collect positive ratings within their blockchain, enabling vetting of their reputation. Deviations from behavioural norms could also be detectable within TAPESTRY to alert users to their digital identity being hacked.From a technological standpoint, the project will develop the decentralised infrastructure necessary to make sense of the vast number of digital interactions using multimodal signals aggregated via machine learning from social media and IoT interactions. Additionally, new cryptographic strategies will be needed to secure the privacy of trust evidence and to disseminate access on a granular basis. From a HCI and co-design perspective, the development of trust services and the shift to use of the digital personhood and interaction history as trust evidence will break new ground, fundamentally altering the way users think about identity and interaction online. To undertake this adventurous and ambitious project we have formed a strategic multi-disciplinary partnership uniting world-leading groups in multi-modal signal processing and machine learning (CVSSP), a BIS/GCHQ recognised centre of excellence for Cyber Security (SCCS), the UK's first and only 5G test-bed for next-gen mobile and IoT (ICS/5GIC), and reflecting the importance of co-designing and evaluating technology in tight integration with end-users, two leading UK groups for socio-digital interaction (DJCAD) and interaction design (UNN).End-user partners participating in the co-design and evaluation of TAPESTRY span the technology, legal, social reform, health and well-being and commercial sectors.