Databox: Privacy-Aware Infrastructure for Managing Personal Data

在不断发展的数字生态系统中建立隐私、信任和安全性被广泛认为是一项关键的社会挑战。美国、欧洲和日本的监管活动得到了行业举措的补充，这些举措旨在重新平衡因广泛收集个人数据而引发的“信任危机”。各方一致认为，应对这一挑战的关键是加强问责制和控制。问责制不仅寻求加强合规，而且使新兴生态系统对消费者更加透明，而控制则寻求赋予消费者权力，并为他们提供积极行使选择权的手段。这项提案将开发实现问责制和控制所需的基础技术基础设施。虽然个人数据管理通常被认为是一件非常私人的事情，但它本质上也是社会性的：仅仅为了保护个人隐私而退出所有在线活动是不切实际的。现代互联网及其支持的“免费”服务的成功在很大程度上取决于广告商和分析提供商赚钱的能力，因此，删除或减少广告收入的方法注定要失败。对个人数据进行个人管理的系统有许多动机和用途，这表明需要一种工具，使个人能够更明确地控制其数据的收集和使用，以及从其在线活动中推断出的信息，同时应对HDI的挑战。我们与合作伙伴组织合作，完善了我们对这样一种工具的愿景，一个数据盒，按需的个人数据聚集和查询点，其控制权直接掌握在用户手中。数据盒的愿景是一个开源的个人网络设备，由云托管服务增强，整理，策划和调解对我们个人数据的访问。数据盒将启用，在某些情况下，甚至可能托管处理个人数据的第三方应用程序和服务。数据盒将成为个人数据处理生态系统的核心，提供一个平台来管理对这些数据的安全访问，并使授权的第三方能够在家庭环境外漫游时为所有者提供经过身份验证的服务。

Building privacy, trust and security into the evolving digital ecosystem is broadly recognized as a key societal challenge. Regulatory activities in the US, Europe and Japan are complemented by industry initiatives that seek to rebalance "the crisis in trust" occasioned by widespread personal data harvesting. All parties agree that key to this challenge are increased accountability and control. Accountability not only seeks to strengthen compliance but also make the emerging ecosystem more transparent to consumers, while control seeks to empower consumers and provide them with the means of actively exercising choice. This proposal will develop the underlying technology infrastructure required to deliver both accountability and control.Although personal data management is generally considered an intensely personal matter, it is also inherently social: it is impractical to withdraw from all online activity simply to protect one's privacy. The success of the modern Internet and the "free" services it supports largely rests on the ability for advertisers and analytics providers to make money with the result that approaches that remove or diminish advertising revenues have been doomed to failure. The many motivations and uses for systems enabling personal management of personal data point to a need for tools enabling individuals to take more explicit control over the collection and usage of their data and the information inferred from their online activities, while addressing the challenges of HDI.Working with partner organisations we have refined our vision of just such a tool, a Databox, an on-demand personal data aggregation and query point, control over which rests directly with the user. The Databox vision is of an open-source personal networked device augmented by cloud-hosted services that collates, curates, and mediates access to our personal data. The Databox will enable and, in some cases, may even host third party applications and services that process personal data. The Databox will form the heart of an individual's personal data processing ecosystem, providing a platform for managing secure access to these data and enabling authorised third parties to provide the owner with authenticated services while roaming outside the home environment.