PRiMMA: Privacy Rights Management for Mobile Applications

普适计算时代正在迅速到来：英国8岁以上的大多数人都携带手机，手机正变得越来越复杂的交互计算设备。基于位置的服务也越来越受欢迎，也越来越复杂。目前正在开发许多跟踪和监测设备，这些设备具有广泛的潜在应用，从支持移动学习到远程监测老年人和慢性病患者的健康状况。然而，用户是否真正了解他们的个人信息有多少被分享给了其他人？在英国信息专员最近发布的一份报告中，我们被警告说，特别是英国正在“梦游进入监控社会”，因为普通公众放弃了大量的个人信息，而没有获得显著的个人或社会优势。总体而言，在披露私人信息的有用性和被滥用的风险之间将进行权衡。该项目将研究保护普适计算应用程序生成的私有信息免受恶意或意外滥用的技术。该项目将针对一组特定的普适计算技术调查普通人群的隐私要求。这些要求将被用来产生一个隐私权利管理(PRM)框架，使用户能够指定隐私偏好，帮助将其可视化，从用户的行为中了解他们可能的偏好，并执行隐私政策。我们将利用1000多名年龄和背景各异的OU学生组成的大队列，来确定需求和评估隐私管理工具。这项工作将解决一些研究问题：*人们如何看待泛在系统中的隐私？*当使用泛在系统时，人们希望拥有什么类型的隐私控制？*如何开发易于通过简单的界面(例如手机)和大屏幕设备使用的隐私控制工具？*如何检测和解决用户隐私要求中的不一致？*可以使用哪些机制来自动化泛在系统中的隐私控制？我们为解决这些问题而开发的PRM框架将把用户的隐私政策与他们的个人信息相结合，以控制信息的使用方式。这类似于数字版权管理(DRM)，数字版权管理通常在受保护的数据中合并诸如“数字水印”之类的信息，或者封装数据以使其具有自我保护功能。通过在框架内提供分析和学习系统，我们相信我们可以产生一个可用的系统，而不会给用户带来复杂的隐私规则集的负担。该项目涉及生命记忆和普适计算的重大挑战，这两者都提出了与移动应用程序中的PRM相关的问题。

The age of Ubiquitous Computing is approaching fast: most people in the UK over the age of 8 carry mobile phones, which are becoming increasingly sophisticated interactive computing devices. Location-based services are also increasing in popularity and sophistication. There are many tracking and monitoring devices being developed that have a range of potential applications, from supporting mobile learning to remote health monitoring of the elderly and chronically ill. However, do users actually understand how much of their personal information is being shared with others? In a recently released report from the UK Information Commissioner, we were warned that the UK in particular is 'sleepwalking into a surveillance society', as ordinary members of the public give up vast amounts of personal information with no significant personal or societal advantage gained. In general, there will be a trade off between usefulness of disclosing private information and the risk of it being misused. This project will investigate techniques for protecting the private information typically generated from ubiquitous computing applications from malicious or accidental misuse.The project will investigate privacy requirements across the general population for a specific set of ubiquitous computing technologies. These requirements will be used to produce a Privacy Rights Management (PRM) framework that enables users to specify privacy preferences, to help visualize them, to learn from the user's behaviour what their likely preferences are, and to enforce privacy policies. We will make use of a large cohort of over 1000 OU students with a broad range of ages and backgrounds, both for identifying requirements and for evaluating tools for privacy management. This work will address a number of research issues:* how do people perceive privacy in ubiquitous systems?* what types of privacy controls would people like to have when using ubiquitous systems?* how to develop privacy control tools that are easy to use via simple interfaces (e.g. mobile phones) as well as large screen devices?* how to detect and resolve inconsistencies in users' privacy requirements?* what mechanisms can be used to automate privacy control in ubiquitous systems?The PRM framework we produce to address these issues will integrate users' privacy policies with their personal information to control how information is used. This is analogous to Digital Rights Management (DRM), which often incorporates information such as 'digital watermarks' in the data being protected or encapsulates the data such that it is self protecting. By providing an analysis and learning system within the framework, we believe that we can produce a usable system that does not burden users with complex privacy rule sets. The project relates to the Memories for Life and Ubiquitous Computing Grand Challenges, both of which raise issues relating to PRM in mobile applications.