• Home
  1. Home
  2. Privacy Verification Chains for IoT
Proceedings chapter
English

Privacy Verification Chains for IoT

Contributors

Foukia, Noria; Billard, David; Solana, Eduardo

Presented at

Helsinki (Finland), 21–23 August 2017

Published in

11th International Conference on Network and System Security, NSS 2017, Proceedings, p. 737-752

Publisher

Cham : Springer International Publishing

Publication date

2017

Abstract

The present paper establishes foundations for implementing Privacy and Security by Design in the scope of the Internet of Things (IoT) by using a new paradigm namely the Privacy Verification Chains (PVC). PVCs will act as a “privacy ledgers” allowing participating entities to prove that they are entitled to hold privacy-related information, regardless of how this information is handled or stored. Furthermore, the PVC structure provides the two following benefits: In case of a security breach resulting in a user data leak, the affected company may browse all the relevant PVCs in order to identify the users affected and trigger the corresponding informative and corrective measures. The PVC will also provide support for bidirectional browsing which means that the data owner will be capable of browsing all the PVCs involving the data he owns in order to find out all the data processors that hold his personal information. From a wider perspective, we enforce a strict separation between data providers and data controllers, where providers are managers of their data privacy, and controllers are accountable for the privacy and protection of the data provided. This role separation will be ensured by a data controller of a so-called Smart Data System (SDS). The SDS handles information along with its privacy settings (metadata), defined by the data owner. In order to control this privacy-preserving framework, our system introduces a Forensic and Auditing System that will enforce the data protection from the processor to a third party. This component will also provide a comprehensive logging functionality that will constitute a legally-binding support to respond to audit procedures, police investigations and(or) law enforcement obligations.

Keywords

  • Privacy by Design
  • Internet of Things
  • Privacy Verification Chains

UNIGE affiliation entities

Citation (ISO format)

FOUKIA, Noria, BILLARD, David, SOLANA, Eduardo. Privacy Verification Chains for IoT. In: 11th International Conference on Network and System Security, NSS 2017, Proceedings. Helsinki (Finland). Cham : Springer International Publishing, 2017. p. 737–752. doi: 10.1007/978-3-319-64701-2_58

Main files (1)

Proceedings chapter (Published version)

Identifiers

Additional URL for this publication

http://link.springer.com/10.1007/978-3-319-64701-2_58

ISBN

978-3-319-64700-5
239views
3downloads

Technical informations

Creation

06/05/2020 15:22:00

First validation

06/05/2020 15:22:00

Update

15/03/2023 21:54:32

Status update

15/03/2023 21:54:31

Last indexation

31/10/2024 18:36:03
All rights reserved by Archive ouverte UNIGE and the University of Geneva
OpenAIRE Indexed & Validated