UPRISE-IoT: User-centric PRIvacy & Security in IoT

该项目的目标是让用户能够控制周围物联网（IoT）设备生成和收集的数据。由于物联网将在我们的日常活动中无处不在，我们的隐私可能面临风险。与此同时，如果从一开始就没有将隐私作为基本设计目标来考虑，物联网技术的部署可能会停止或减慢。总的来说，由于这些原因，我们认为在物联网中采用隐私设计方法是至关重要的。该项目将通过考虑以用户为中心的方法，重新审视物联网隐私空间。它将以用户为中心，考虑用户的行为和环境，以保护隐私的方式提高安全性和隐私性。这种方法还将增加数据的透明度和控制力。用户将以用户友好的方式被告知正在收集的数据，并可以选择反对收集数据。我们计划开发一种解决方案，为物联网世界中的数据隐私控制提供工具。因此，我们相信该项目将提高用户的新意识，这样用户的行为就不会危及他们的安全，也有利于创建一个基于物联网数据货币化的新市场。预期的结果是创建一个以用户为中心的新安全空间，其中安全解决方案要么直接集成在物联网设备中（创建智能安全对象），要么通过功能强大的用户友好型移动应用程序向用户提供，用于：(i)“智能化”本质上不安全的物联网设备，（ii）微调隐私水平；（iii）意识到他们的行为是为了保护他们免受安全和隐私威胁，（iv）意识到他们信息的价值。我们将通过涉及用户的实验工作来验证我们的结果。我们计划采用定量/定性混合的方法来解决这个问题：我们将调查用户对安全的感知，并测量用户数据保护的实际水平。

The goal of this project is to allow users to gain control over data generated and collected by the Internet of Things (IoT) devices surrounding them. Since the IoT will be omnipresent in our day-to-day activities, our privacy is potentially at risk. At the same time, the deployment of IoT technologies might be stopped or slowed-down if privacy is not considered from the beginning as a fundamental design objective. In general, for these reasons, we believe that it is essential to adopt a privacy-by-design approach for the IoT.This project will take a fresh look at the IoT privacy space by considering a user-centric approach. It will be user-centric by considering user's behaviour and context in order to improve security and privacy in a privacy-preserving manner. The approach will also increase data transparency and control. Users will be informed about the data that is being collected in a user-friendly manner, and will have the option to oppose to its collection. We plan to develop a solution that will offer tools for controlling data privacy in the IoT world. Therefore, we believe that the project will raise a new awareness in the users, so that users' behaviour will not compromise their security, favouring also the creation of a new market based on the monetization of IoT data.The expected result is the creation of a new secure space centred around the user where security solutions are either integrated within IoT devices directly (creating smart secure objects) or made available to the user by powerful user-friendly mobile applications for: (i) "smartifying" the IoT devices that are not intrinsically secure, (ii) fine-tuning the level of privacy; (iii) getting awareness of their behaviour for being protected from security and privacy threats, (iv) getting awareness of the value of their information.We will validate our results with experimental work involving users. We plan to adopt a mixed quantitative/qualitative approach to the problem: we will both survey users' perception of security, as well as measure the real level of protection of users' data.