User-Driven Privacy Enforcement for Cloud-Based Services in the Internet of Things

Abstract

Abstract-Internet of Things devices are envisioned to penetrate essentially all aspects of life, including homes and urban spaces, in use cases such as health care, assisted living, and smart cities. One often proposed solution for dealing with the massive amount of data collected by these devices and offering services on top of them is the federation of the Internet of Things and cloud computing. However, user acceptance of such systems is a critical factor that hinders the adoption of this promising approach due to severe privacy concerns. We present UPECSI, an approach for user-driven privacy enforcement for cloud-based services in the Internet of Things to address this critical factor. UPECSI enables enforcement of all privacy requirements of the user once her sensitive data leaves the border of her network, provides a novel approach for the integration of privacy functionality into the development process of cloud-based services, and offers the user an adaptable and transparent configuration of her privacy requirements. Hence, UPECSI demonstrates an approach for realizing user-accepted cloud services in the Internet of Things.

Panel Security and Privacy in the Age of Internet of Things

“…This data can be sent to remote locations for further analysis, processing, or retention on a variety of application and service platforms (e.g, cloud services). Every single device and platform in the IoT space might present a potential risk or threat [3][4][5]7] that could be exploited to harm consumers by (1) enabling unauthorized access and misuse of personal information; (2) Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored.…”

Strengthening Enforcement in a Comprehensive Architecture for Privacy Enforcement at Internet Websites

“…With respect to architectural approaches to technical/automated privacy enforcement, related literature includes Henze et al (2014) and Adams and Barbieri (2006). However, the work of Henze et al proposes an architecture for enforcing user privacy in a network of IoT devices (e.g., a body-area-network of health monitoring devices) connected to cloud-based services.…”

Securing tags to control information flows within the Internet of Things

“…Henze et al [28] propose a policy negotiation mechanism enforced between a 'thing' and cloud storage provider. Much like an enforceable SLA, it considers a particular 'thing'-cloud interaction.…”