Technology and Privacy

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 2929e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29thth INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS


Technology and PrivacyTechnology and Privacy

Teresa Lunt

Palo Alto Research Center

Teresa Lunt

Palo Alto Research Center

In collaboration with Victoria Bellotti, Richard Chow, Glenn Durfee, Philippe Golle, Diana Smetters, Jessica Staddon, and others…

In collaboration with Victoria Bellotti, Richard Chow, Glenn Durfee, Philippe Golle, Diana Smetters, Jessica Staddon, and others…


GenderZIP code

Date of Birth

Cancer Type

Patient Records

Voter Registration

NameStreet address

…Gender

ZIP codeDate of Birth

Voter Registration

NameStreet address

…Gender

ZIP codeDate of Birth

Hot Privacy Technology ResearchHot Privacy Technology Research• Identity management and access

control– Credentials, reputation, pseudonyms,

unlinkability, phishing• Data privacy, data mining and

inference control– Census data, medical data

• Location privacy– Location-based cell-phone services,

friend locator• Usable privacy

– Privacy policy languages, automatic negotiation

• Anonymous communication– Web-browsing, censorship resistant

publishing, voting

• Identity management and access control– Credentials, reputation, pseudonyms,

unlinkability, phishing• Data privacy, data mining and

inference control– Census data, medical data

• Location privacy– Location-based cell-phone services,

friend locator• Usable privacy

– Privacy policy languages, automatic negotiation

• Anonymous communication– Web-browsing, censorship resistant

publishing, voting


Hot Privacy Technology ResearchHot Privacy Technology Research• Privacy in ubiquitous computing

environments– Sensors, RFID tags

• Private information retrieval– Look-up of patents, medical conditions,

DNA sequences• Private computations (secure

function evaluation)– Millionaire problem, collaborative

forecasting, intrusion detection• Search on encrypted data

– Classification of encrypted emails, encrypted documents

• And More…– Economics of privacy, policy, law, etc.

• Privacy in ubiquitous computing environments– Sensors, RFID tags

• Private information retrieval– Look-up of patents, medical conditions,

DNA sequences• Private computations (secure

function evaluation)– Millionaire problem, collaborative

forecasting, intrusion detection• Search on encrypted data

– Classification of encrypted emails, encrypted documents

• And More…– Economics of privacy, policy, law, etc.

Inde

x i

Reco

rd i

PrivateComputation

x y

f (x, y)


Technology is a Moving TargetTechnology is a Moving Target

• Examples of current research at PARC– Ubiquitous Computing

• Embedded everywhere, often with sensors

– Context Aware Computing• Able to make inferences and act based on sensing

– Social Computing• Interaction and collaboration online

– Privacy and Security Research• Increased IT capabilities imply greater need for control

• Examples of current research at PARC– Ubiquitous Computing

• Embedded everywhere, often with sensors

– Context Aware Computing• Able to make inferences and act based on sensing

– Social Computing• Interaction and collaboration online

– Privacy and Security Research• Increased IT capabilities imply greater need for control


Ubicomp & sensor data

Outsourced data

Transaction data

data source

data source

data source

Priv

acy-

pres

ervi

ng

tran

sfor

mat

ions

and

kn

owle

dge

extr

actio

n

privacy appliance

customer query

Info

rmat

ion

stor

efro

ntEnable sale of transformed data while providing privacy protection for individuals represented in the data

PARC started research here but more work is needed

Privacy AppliancePrivacy Appliance


Personal Privacy AppliancePersonal Privacy Appliance

ProfileDatabase

ProfileDatabase

3. She enables the mall to read her profile from her phone. No identity is needed

1. Her shopping and other activities are reported to her PPA

2. She synchs her phone with her profile

PersonalPrivacy Appliance


User Control of Profile DisseminationUser Control of Profile Dissemination

Clothing Colors: B Size: 16 Extra tall

Books History Mysteries

Music Opera Baroque

Children Aged 3 and 5

X

X

Privacy software in the PDA can inform the user of the privacy consequences of releasing certain data

Stores could offer incentives to users to enable their profiles: coupons, discounts, …

Users can disable portions of their profile when entering certain stores, friends houses, etc.

Not sensitive

Verysensitive

Mediumsensitive


In-document SecurityIn-document Security

Credit Report

Mortgage Application

SSN: 123-45-6789 Social Security Number: 123456789

Home Inspection Report

Property Address: 1234 Main St.

Fence with adjacent property, 1234 Elm St. , is damaged.

Property Appraisal


Property has view of Golden Gate Bridge.

Police ReportAtherton, CA

…outside the apartment building…


Natural Language understanding aids content

analysis

Document appears different to people based on their access rightsDocument appears different to people based on their access rights


• Technology and privacy are often seen as opposing forces

• Privacy advocates feel like Sisyphus versus his stone

• But some technologists feel the same way

• Both sides need to work together continuously

• Technology and privacy are often seen as opposing forces

• Privacy advocates feel like Sisyphus versus his stone

• But some technologists feel the same way

• Both sides need to work together continuously

PrivacyPrivacy

TechnologyTechnology

A Never-Ending StoryA Never-Ending Story


The internet of things: Toward distributed knowledge production

The internet of things: Toward distributed knowledge production

David J. PhillipsUniversity of Toronto

Faculty of Information Studies




Two scenarios– administrative efficiency– distributed knowledge production (smart mobs)

Two scenarios– administrative efficiency– distributed knowledge production (smart mobs)


How does a mob get smart?How does a mob get smart?


How does a mob get smart?– know the environment

How does a mob get smart?– know the environment


How does a mob get smart?– know the environment– know each other

How does a mob get smart?– know the environment– know each other


How does a mob get smart?– know the environment– know each other– live together in the environment

How does a mob get smart?– know the environment– know each other– live together in the environment


How does a mob get smart?– know the environment– know each other– live together in the environment– know the enemy

How does a mob get smart?– know the environment– know each other– live together in the environment– know the enemy


Distributed knowledge and policy makingDistributed knowledge and policy making


Distributed knowledge and policy making– data protection principles

Distributed knowledge and policy making– data protection principles


Distributed knowledge and policy making– data protection principles– industry organization

Distributed knowledge and policy making– data protection principles– industry organization


Distributed knowledge and policy making– data protection principles– industry organization– theory building

• security vs privacy


• security vs privacy



• security vs privacy• new questions for policy makers


• security vs privacy• new questions for policy makers




[email protected]



[email protected]



the internet of things:

… well then, why not people?

the internet of things:

… well then, why not people?

iankerrcanada research chair in ethics, law & technology

university of ottawa

iankerrcanada research chair in ethics, law & technology

university of ottawa


ubiqcompubiqcomp


ubiqcomp ≠ UBIQCOMPubiqcomp ≠ UBIQCOMP


ubiqcompubiqcomp



ad hoc network ad hoc network


privacy ??privacy ??


privacy by designprivacy by design


1.1.




2.2.


(re)design the concept of privacy

(re)design the concept of privacy




oct 25/26/27oct 25/26/27


sccprivacy hierarchy


personal (bodily)

territorial (property)

informational (core biographical)

personal (bodily)




information emanationinformation emanation


flirflir


(rfid)(rfid)




personal (bodily)




info ≠ core biographicalinfo ≠ core biographical


privacyprivacy


reasonable expectationsreasonable

expectations


‘spatial privacy’ = {terr + info + …}

‘spatial privacy’ = {terr + info + …}


internet of ‘things’internet of ‘things’


so far …so far …




personal networkspersonal networks


redtacton.comredtacton.com






cyberneticscybernetics







personal (bodily)




????????


ubiqcomp ≠ UBIQCOMPubiqcomp ≠ UBIQCOMP


ipv6ipv6


Documents

Technology and Privacy