Databox: Privacy-Aware Infrastructure for Managing Personal Data

在不断发展的数字生态系统中建立隐私、信任和安全被广泛认为是一项关键的社会挑战。美国、欧洲和日本的监管活动得到了行业举措的补充，这些举措寻求重新平衡由广泛收集个人数据引发的“信任危机”。所有各方都同意，解决这一挑战的关键是加强问责和控制。问责制不仅寻求加强合规，而且使新兴生态系统对消费者更加透明，而控制寻求赋予消费者权力，并为他们提供积极行使选择的手段。这项提议将发展实现问责和控制所需的基础技术基础设施。尽管个人数据管理通常被认为是一件非常私人的事情，但它也具有内在的社会性：仅仅为了保护个人隐私而退出所有在线活动是不切实际的。现代互联网及其支持的“免费”服务的成功，在很大程度上取决于广告商和分析提供商赚钱的能力，其结果是，移除或减少广告收入的方法注定要失败。支持个人数据管理的系统的许多动机和用途表明，需要工具使个人能够更明确地控制其数据和从其在线活动中推断的信息的收集和使用，同时应对人工智能的挑战。与合作伙伴组织合作，我们已经细化了我们的愿景，即这样一个工具，一个按需个人数据聚合和查询点，直接由用户控制。Databox的愿景是一个开源的个人联网设备，通过云托管服务来增强，这些服务可以整理、管理和协调对我们个人数据的访问。数据库将启用，在某些情况下，甚至可能托管处理个人数据的第三方应用程序和服务。数据库将形成个人个人数据处理生态系统的核心，为管理对这些数据的安全访问提供一个平台，并使授权的第三方能够在漫游到家庭环境之外时向所有者提供经过验证的服务。

Building privacy, trust and security into the evolving digital ecosystem is broadly recognized as a key societal challenge. Regulatory activities in the US, Europe and Japan are complemented by industry initiatives that seek to rebalance "the crisis in trust" occasioned by widespread personal data harvesting. All parties agree that key to this challenge are increased accountability and control. Accountability not only seeks to strengthen compliance but also make the emerging ecosystem more transparent to consumers, while control seeks to empower consumers and provide them with the means of actively exercising choice. This proposal will develop the underlying technology infrastructure required to deliver both accountability and control.Although personal data management is generally considered an intensely personal matter, it is also inherently social: it is impractical to withdraw from all online activity simply to protect one's privacy. The success of the modern Internet and the "free" services it supports largely rests on the ability for advertisers and analytics providers to make money with the result that approaches that remove or diminish advertising revenues have been doomed to failure. The many motivations and uses for systems enabling personal management of personal data point to a need for tools enabling individuals to take more explicit control over the collection and usage of their data and the information inferred from their online activities, while addressing the challenges of HDI.Working with partner organisations we have refined our vision of just such a tool, a Databox, an on-demand personal data aggregation and query point, control over which rests directly with the user. The Databox vision is of an open-source personal networked device augmented by cloud-hosted services that collates, curates, and mediates access to our personal data. The Databox will enable and, in some cases, may even host third party applications and services that process personal data. The Databox will form the heart of an individual's personal data processing ecosystem, providing a platform for managing secure access to these data and enabling authorised third parties to provide the owner with authenticated services while roaming outside the home environment.