LIoPY: A Legal Compliant Ontology to Preserve Privacy for the Internet of Things

Abstract

The Internet of Things (IoT) provides the opportunity to collect, process and analyze data. This opportunity helps to understand preferences and life patterns of individuals in order to offer them customized services. However, privacy has become a significant issue due to the personal nature of the knowledge derived from these data and the involved potential risks. Despite the increasing legislation pressure, few proposed solutions have dealt with the privacy requirements, such as consent and choice, purpose specification, and collection limitation. In this paper, we propose a privacy ontology in order to incorporate privacy legislation into privacy policies while considering several privacy requirements. Our proposed ontology aims both at making the smart devices more autonomous and able to infer data access rights and enforcing the privacy policy compliance at the execution level. We implemented and evaluated our privacy ontology based on a healthcare scenario.

Semantic IoT Gateway: Towards Automated Generation of Privacy-Preserving Smart Contracts in the Internet of Things

“…For this purpose, we propose a Semantic IoT Gateway that aims at converting the data owner's privacy preferences into smart contracts that will be published within the blockchain to be enforced. As aforementioned, our Semantic IoT Gateway is based on an IoT privacy ontology, called LIoPY and defined in our previous work [8].…”

“…The Semantic Rule Manager provides the Semantic IoT Gateway with semantic capabilities that enable to infer additional knowledge from the defined concepts in the European Legal compliant IoT Privacy-preserving ontologY(LIoPY) [8]. The main purpose of our LIoPY ontology is to enable inferring a privacy policy that aims at protecting privacy during the whole process of collecting, transmitting, storing, and processing the collected data by smart devices.…”

“…These subclasses specify for what reason, for how long, how, under which conditions the owner's data will be handled, and to whom they can be disclosed. The Semantic Rule Manager is based on our matching algorithm described in [8] to provide the appropriate policy that matches the privacy requirements of both Privacy Rule and Terms of Service classes using a set of predefined inference rules.…”

“…Nevertheless, the Semantic IoT Gateway is intended to convert the data owner's privacy preferences into smart contracts that will be published within the blockchain. Moreover, our Semantic IoT Gateway is based on an IoT privacy ontology, called LIoPY, which is a European legal compliant ontology to preserve privacy for IoT and defined in our previous work [8]. Thanks to LIoPY use, a privacy policy can be inferred according to the data owner's privacy preferences and the data consumer's terms of service.…”

A Semantic Collaboration Method Based on Uniform Knowledge Graph

“…The introduction of semantic technology will greatly improve the problem of insufficient machine understanding ability. Using the core of semantic technology (ontology) [15] to label the information of things semantically can provide users with more understandable information, so as to solve the problem of isomerization and enhance the ability to acquire related information, thus forming the Semantic Internet of Things (SIOT).…”