Trusted Things & Communities: Understanding & Enabling A Trusted IoT Ecosystem

物联网（IoT）概念是指将物理对象、传感器和移动设备无缝集成到互联网上。物联网包括许多不同的技术、服务和标准，并被许多人视为未来几年ICT市场的基石。然而，物联网解决方案不仅仅包括实现技术基础设施所需的硬件和软件，因为它们还包括所涉及的人员、组织、政策和监管系统。据估计，到2020年将有500亿台设备，并且通过机器对机器交易被动收集的数据比例将超过个人主动生成的数据比例，因此需要解决方案来加强信任。利用位于阿伯丁Tillydrone区的现有社区物联网测试平台，我们将探索实现透明、负责任并赋予最终用户权力的解决方案意味着什么。TrustLens是我们对未来工具集的愿景，它将使个人以及他们所属的社区能够更好地理解和管理有关他们的数据。然而，在我们实现TrustLens之前，需要调查几个关键问题：覆盖物联网部署的适当治理安排是什么？我们如何提供有意义的问责制？我们如何才能理解个人和设备之间的相互作用，以及与社会/文化规范之间更广泛的关系？在物联网环境下，公民和社区对隐私和风险的态度是什么？风险和利益应该如何沟通？用户如何做出明智的决定来判断信息的可信度？这些问题的答案（以及许多其他问题肯定会出现）将引导我们开发原型解决方案，将与Tillydrone社区的成员进行评估。我们的目标是创造一种方法，使用户可以根据其对个人数据的影响来审查物联网设备的特征，并回答以下问题：它捕获了什么类型的数据？为了什么目的？谁看到了？（潜在的）好处和风险是什么？他们还应该能够对他们的数据施加一定程度的控制，并被引导评估其可靠性和准确性。

The Internet of Things (IoT) concept refers to the seamless integration of physical objects, sensors and mobile devices onto the Internet. The IoT encompasses many different technologies, services and standards and is seen by many as the cornerstone of the ICT market in the coming years. However, IoT solutions comprise more than just the hardware and software necessary to realize the technical infrastructure, as they also include the human actors, organisations, policies and regulatory systems involved. With some estimates predicting 50 billion devices by 2020, and the proportion of data collected passively through machine-to-machine transactions surpassing that actively generated by individuals - solutions are needed to strengthen trust. Using an existing community Internet of Things testbed located in the Tillydrone district of Aberdeen, we will explore what it means to realize solutions that are transparent, accountable, and which empower end-users. The TrustLens is our vision of a future toolset that will enable individuals, and the communities of which they are a part, to better understand and manage the data about them. However, before we can realize the TrustLens, several key issues need to be investigated: What are the appropriate governance arrangements covering IoT deployments? How do we deliver meaningful accountability? How can we develop an understanding of the interplay between individuals and devices, and the wider relationship to social/cultural norms? What are the attitudes of citizens and communities to privacy and risk in an IoT context? How should risks and benefits be communicated? How do users make informed decisions to judge the trustworthiness of information? Answers to these (and the many other questions that will certainly emerge) will lead us to develop prototype solutions that will be evaluated with members of the Tillydrone community. Our ambition is to create a means by which a user can review the characteristics of an IoT device in terms of its impact on their personal data, answering questions such as: What type of data is it capturing? For what purpose? Who sees it? What are the (potential) benefits and risks? They also should be able to exert a degree of control over their data, and be guided to assess its reliability and accuracy.