PACE: Privacy-aware Cloud Ecosystems

随着外部提供和管理的服务(来自政府、金融、娱乐)的使用越来越多，通常通过云计算基础设施托管，人们意识到在线电子服务可能涉及一系列相互关联的提供商。Gartner预测，云计算市场将以32%的复合年增长率(2016-2019年)增长，市场上可能会涌现出更多的提供商。英国通信办公室的《通信市场报告》显示，2015年英国电信业务总收入为375亿英镑，表明移动服务对英国经济的巨大贡献。随着更多移动服务和基础设施的出现，人们对新的商业模式感兴趣，这种模式可以促进更多的用户使用这些服务。然而，从用户的角度来看，对使用这些服务的信任仍然有限，皮尤研究中心的报告(《未来十年的在线信任的命运》，2017年8月)强调了这一点，该报告调查了1233名受访者-24%的受访者预测，对在线服务的信任可能会随着时间的推移而减少。报告显示，尽管现在有数十亿人使用手机和互联网，但由于对在线供应商的信任有限，许多人仍然没有使用这种连接进行购物、银行和其他重要交易。一些受访者表示，新技术(如区块链)的使用和监管合规(以及行业变化)将有助于增加对在线服务的信任。在接下来的十年里，随着越来越多的人在全球范围内上网，机会和威胁都会增加。现在，由于基于云的配置的广泛采用，其中一些移动服务可能会存在于网络边缘。例如，假设一家咖啡连锁店最初向客户提供Wifi服务，现在与数据中心提供商合作，为用户提供额外的服务(例如边缘数据存储、多媒体缓存等)。许多涉及移动边缘计算的组织(例如，欧洲ETSI和NIST“大数据”工作组)已经提出了这样的场景。该项目解决了此类环境的安全和隐私要求，在这种环境中，多个云计算提供商需要协作为用户提供服务。这些服务的用户只与Web界面交互，而不是与更大的分布式服务生态系统交互，而且通常不熟悉为他们提供特定功能的提供商的“生态系统”。他们在第一个服务提供商之外的可见性通常会丢失，这要求他们在处理和管理他们的数据时“信任”提供商。这是一个巨大的挑战，根据皮尤研究中心最近的一份报告，经常阻碍使用在线服务(特别是对于市场上新出现的数据提供商)。他们经常委托自己的数据和身份，而没有意识到服务提供商可能会与几个后端服务(云托管分析、广告商)共享他们的数据。虽然这在过去一直是一个问题，但随着联网设备的扩张，这一问题将大大加剧。为了解决这一问题，将实施《一般数据保护条例》(GDPR)，以确保非专家用户可以就其隐私做出知情决定，从而对其个人数据的使用、共享和再利用给予‘知情同意’。无论是对于需要提供同意的个人还是需要获得同意的数据管理员来说，促进这一点都面临着许多挑战。为了解决这一问题，我们提出了一种移动软件“容器”形式的技术解决方案，它将确保安全地记录所有访问实例。这将提高透明度，实现对供应商的审计跟踪，并促进用户和服务供应商之间更大的信任。

With increasing take up of externally provisioned and managed services (from government, finance, entertainment), often hosted over Cloud computing infrastructure, there is a realisation that on-line electronic services can involve an interlinked range of providers. Gartner forecasts that cloud computing market will grow at a compound annual growth rate of 32% (2016-2019), with the potential for additional providers to emerge in the market place. Ofcom's "Communication Market Report" indicates total UK telecoms business revenue were 37.5bn in 2015, indicating significant contribution of mobile services to the UK economy. With the availability of additional mobile services and infrastructure, there is interest in new business models that can facilitate additional subscribers to make use of these services. However, from a user's perspective, trust in the use of these services remains limited, as highlighted in the Pew Research Centre report ("The Fate of Online Trust in the Next Decade", August 2017), which surveyed 1,233 respondents - 24% of these respondents predicted that trust in on-line services is likely to diminish over time. The report revealed that although billions of people use "cellphones" and the internet now, many still do not use that connectivity for shopping, banking, and other important transactions due to limited trust in on-line providers. Some of the respondents surveyed indicated that the use of new technology (such as Blockchains) and regulatory compliance (and industry changes) will help increase trust in on-line services. As more people move online globally over the next decade, both opportunities and threats grow. It is now likely that due to the wide adoption of Cloud based provisioning, some of these mobile services will exist at the network edge. Consider, for instance, a coffee chain that initially provided Wifi services to customers, now working in collaboration with data centre providers to offer additional services to users (e.g. edge data storage, multimedia caching, etc). Such scenarios have been proposed by a number of organisations involved in Mobile Edge Computing (e.g. the European ETSI and the NIST "Big Data" Working Group). This project addresses security and privacy requirements of such environments, where multiple Cloud computing providers need to work collaboratively to offer services to a user. Users of these services only interact with a Web interface rather than the larger, distributed service ecosystem, and are often unfamiliar with the "ecosystem" of providers that are involved in offering them a particular capability. Their visibility beyond the first service provider is often missing, requiring them to "trust" the provider in handling and managing their data. This is a significant challenge, and according to a recent report from the Pew Research Centre, often deters the use of on-line services (especially for data providers which are new in the market place). They often entrust their data and identity without realising that the service provider may share their data with several back-end services (Cloud hosted analytics, advertisers). While this has been a problem in the past, it will be greatly exacerbated by the expansion of internet connected devices. In order to address this, the General Data Protection Regulation (GDPR) will be implemented to ensure that non-expert users can make informed decisions about their privacy and thereby give 'informed consent' to the use, sharing and re-purposing of their personal data. There are a number of challenges to facilitating this, both for individuals who need to provide consent and for data controllers who need to obtain it. As a means of addressing this, we propose a technological solution in the form of a mobile software "container" that will ensure that all access instances are securely logged. This will improve transparency, enable an audit trail of providers and facilitate greater trust between users and service providers.