Presentation is loading. Please wait.

Presentation is loading. Please wait.

21-April 2006 21-April 2006 +31 6 204 315 47 Privacy Incorporated Software Agents Jan Huizenga - TNO - PISA co-ordinator.

Similar presentations


Presentation on theme: "21-April 2006 21-April 2006 +31 6 204 315 47 Privacy Incorporated Software Agents Jan Huizenga - TNO - PISA co-ordinator."— Presentation transcript:

1 21-April April Privacy Incorporated Software Agents Jan Huizenga - TNO - PISA co-ordinator

2 2 u Main Topics PISA u Mobile Intelligent Agents u Agents and Privacy u Contribution Overview

3 3 Main topics PISA Agent System Human-Computer Interface Network Privacy Security & Privacy

4 4 Mobile Intelligent Agents product date Local Area: LANWide Area: WAN Personal Area:PAN HIPERLAN 0,01 0, Max data rate (Mbps) Application Space Video data rate GPRS 3G Voice Text Messaging Still Imaging Audio Streaming Video Streaming Infotainment Virtual Homes High Speed Internet PAN/LAN/WAN Convergence Bluetooth HomeRF GSM Mobile Agents AMBIENT Intelligence Communication Space

5 5 Around PISA: a complex world where... wireless Server SGSN PDN GGSN NodeB RNC Gateway ME intermediation ASP Cellular (e.g. UMTS) RAN Core Network Sec. M. Appli PKI privacy must transcend heterogenity and mobility Local

6 MIKEs Agent External sources Agent- provider Agent 2 Agent 1 Agent N Network Agents databases: personal data about Mr. Jones MIKE THE AGENT AND PERSONAL DATA FLOW A personal agent can perform tasks for its user. => a personal agent needs personal information

7 7 Agents & Privacy 1997: NDPA, DPA Canada, TNO: Report Agents, Privacy & PET 1999: How do we demonstrate agents & privacy? 2000: Project/consortium proposal : PISA u Identifying the privacy requirements and threats u Designing PET for agents u Building a sample application u Evaluating the sample application

8 8 PRIVACY THREAT ANALYSIS SYSTEM PURPOSE TECHNOLOGY INTEGRATED LIST OF THREATS VIOLATIONS OF PRIVACY REGULATIONS SOLUTION USE Mobile code

9 9 THE THE IDENTITY PROTECTOR PET = Privacy Enhancing Technologies PID 1 PID 3 PID 2 USER KNOWN IDENTTY DOMAINS PSEUDO IDENTITY DOMAINS

10 10 The Privacy Agent Design To show that privacy of the user is protected in all kinds of processes by incorporated PET features Personal data Non- Personal data Identity Protector

11 11 Privacy Protection How to achieve privacy protection in Agents? u Deployment of PETs Classic tools (anonymity, pseudonymity, unobservability and unlinkability) is not enough to achieve optimal privacy protection. u Therefore PISA needs a design for: 3 Personal Data : Personal Identifiable Information (PII), and Non-PII. 3 Legal rules (privacy principles) 3 Agent Practices Statement (APS) 3 Privacy Preferences

12 12 Three Levels of Personal Data u Level 1: Contact Information. u Level 2: All other items of personal data except level 3. u Level 3: Special categories of personal data.

13 13 Privacy Principles Purpose specification Purpose specification Finality Finality Legimate Processing Legimate Processing Data quality Data quality Transparency Transparency Data subjects rights Data subjects rights Storage duration Storage duration Right to object Right to object Security Security

14 14 Privacy Ontology PIILevel2 PIILevel1 PIILevel3 DataProtectionAutority PET APS PrivacyPrinciple PrivacyPreference 1..n 0..n 1..n 1 Transparency Finality LegalProcessingTransfer DataSubjectRights PrivacyPolicy PIIGroup PII

15 15 Model PISA Agents Privacy Protection by: 1. Anonymity & Pseudo-identities (PET) 2. Trust/secure mobile code (Encryption) 3. Act according the Directive (APS) Controller Other Agents or Services PISA User Personal Data APS Auditor Trusted Third Party PET Preferences

16 16 General PISA Architecture

17 17 HCI and PRIVACY PROTECTION Just-In-Time Click-Through Agreements: Informed, Unambiguous Consent HCI Requirements for Legislative Compliance and Usable Design Building Trust & Reducing Risk From Privacy Legislation to Interface Design

18 18 Usability Results + The prototype worked fairly well (72%) and was easy to navigate (76%), but it had poor visual appeal (42%) + Users understood the concept of a personal assistant who could provide services (92%) + Users understood (>90%) the major functions (create, modify, track, results)

19 19 Network & Privacy Agent Onion Routing Network Digital Rights Management for Privacy Reputation System Scalability

20 20 Security & Privacy in PISA Agents Practical solutions to provide privacy in agent technology u Agent Digital Signature u Pseudo anonymous Task Agents u Confidential communication: E-E-D encryption u Agent -PKI Insight in challenges for agent technology / mobile code Theoretical results (IEEE Symposium on Information Theory): u Definition perfect secrecy u Theoretical boundaries u PhD Thesis TUD : Private Computing and Mobile Code Systems K. Carthrysse 2005: ISBN 10:

21 21 Results Security & Privacy research is recognized as important in Dutch scientific community;Security & Privacy research is recognized as important in Dutch scientific community; But also in politics: Ministry of Economical Affairs subsidizes technical projects in privacy;But also in politics: Ministry of Economical Affairs subsidizes technical projects in privacy; Industry / business becomes aware of importance to protect privacy;Industry / business becomes aware of importance to protect privacy; STIMULUS AND RATIONALE FOR NEW PRIVACY RELATED RESEARCH AND EXPLOITATION STIMULUS AND RATIONALE FOR NEW PRIVACY RELATED RESEARCH AND EXPLOITATION

22 22 Continuation Continuation of the PISA work: u RAPID: Roadmap Privacy & Identity Management FP6 u PRIME: Privacy and Identity Management; Ontology & HCI u LOBSTER: Intrusion Detection Geant2; Anonymous data u PAW: (Privacy in an Ambient World): Catholic University of Nijmegen, University of Twente, Delft University of Technology, TNO u BASIS: (Biometrics and Privacy) : University of Twente, Technical University Eindhoven, CWI, Philips u Privacy and RF- ID tags: - TNO Study for Dutch government, RFID-Certification - TUD Thesis Anonymus RFID e- ticketing system


Download ppt "21-April 2006 21-April 2006 +31 6 204 315 47 Privacy Incorporated Software Agents Jan Huizenga - TNO - PISA co-ordinator."

Similar presentations


Ads by Google