Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

Abstract

Ubiquitous questionnaire is to provide users with E-questionnaire services anytime and anywhere such that one can use E-questionnaire servers without even thinking about them. An E-questionnaire server for ubiquitous questionnaire should provide guarantees to satisfy any user-specified requirement on information assurance, privacy, and security because some questionnaires may concern organization secrets as well as personal privacy, and some questionnaires such as E-voting or E-testing must impose restrictions on and provide assurance to respondents, voters, and/or testees. Until now, there is no detail requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. To implement an Equestionnaire server for ubiquitous questionnaire, this paper presents a requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. The paper identifies all participants and their information assets in ubiquitous questionnaire with a general purpose E-questionnaire server that can be used not only an E-questionnaire server but also an E-voting server and an E-testing server, gives a threat analysis of and a requirement analysis for information assurance, privacy, and security, and investigates technical issues for implementing facilities satisfied the requirements.

QSL: A Specification Language for E-Questionnaire, E-Testing, and E-Voting Systems

“…There are some common requirements for question types such as multiple choices, validation common requirements to limit the responses and control the required response, etc., and common setting requirements such as language to support the representation of multilanguage. The services are inseparable from the common roles of the participants, which are sponsor who organizes and supports an event; questioner who designs a paper and settings, usually called examiner in e-testing; analyst who processes the collected responses; monitor who monitors whether illegal or dishonest behavior occurs or not; respondent who answers the questions in the paper, usually called examinee in e-testing and voter in e-voting [2]; and analyst who analyze the collected responses. In addition, these services have common requirements for recording information such as responses from respondents, and analyzed reports.…”

“…server developing for ubiquitous questionnaire that can be used as a readymade e-questionnaire server component in various web service systems as well as an alone equestionnaire server with general-purpose for various questionnaires. It can also be used as an e-testing server and an e-voting server with general-purpose by restricting its general functions and strengthening its security functions [2]. ENQUETE-BAISE [78] has been used to support students in Saitama University to access, login, and use it to do QTV since 2007.…”

“…Questionnaire and voting are the essential activities of the modern communities as the general and indispensable methods for a group of people to express a choice, a preference, or an opinion [1]. Testing also is a necessary activity as an integral way to be widely used to assess people's achievement, ability, and characteristics [2]. Over two decades, many kinds of questionnaires, testing, and voting are performed in some completely electronic ways to do questions and answers on the Internet as Web applications, i.e.…”

QSL: A specification language for e-questionnaire systems

“…An E-questionnaire is to perform all processes from preparing question to analyze collected answers in some completely electronic way [18]. An e-questionnaire system is a system that provides its users environment to do equestionnaires.…”

Developing a Real-Time Web Questionnaire System for Interactive Presentations

“…We tried to realize the efficacy of decision-making at a certain scale of meetings in enterprises and organizations. As users fill out the questionnaires, they want to feel safe; thus, we implement a new questionnaire mode for tackling the problems with existing approaches [12].…”