SGER: Collaborative Research: Secure and Auditable Privacy Contracts

SGER：协作研究：安全且可审计的隐私合同

• 批准号: 0751069
• 负责人: Bulent Yener
• 金额: $ 5万
• 依托单位: Rensselaer Polytechnic Institute
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-10-01 至 2008-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0751069&HistoricalAwards=false
• 关键词: SGER; Collaborative; Research; Secure; Auditable

Proposal Number: 0751069PI: Bulent Yener Institution: Rensselaer Polytechnic InstituteProposal Number: 0751095PI: Aggelos Kiayias Institution: University of Connecticut Title: SGER: Collaborative Research: Secure and Auditable Privacy ContractsProposal AbstractOne of the major challenges imposed by the pervasiveness ofcyberspace is to ensure ``trust'' and design trustworthy systems tosupport the critical infrastructure for official, commercial, andpersonal business. Millions of everyday users pass their personnelinformation over the Internet to their health-care providers, totheir banks, to insurance companies and other service providers.Once such personnel information is transferred, in many cases, it isoutsourced to other parties (some of which may even reside inforeign countries) for storage and processing. It may be sold orresold for data mining.The collection, processing and resale of private data is amulti-million dollar industry that has serious security and privacybreaches including inadvertently revealing or loosing thepersonal information of thousands or millions of people.While there is a clear need for knowledge discovery for commercial(e.g., marketing, insurance design), scientific and even securityreasons (e.g., identifying public health problem outbreaks such asepidemics, biological warfare instances), at present, ``dataproducers'' (i.e., users like all of us) have no control of who,how, and what exactly is done with such private and sensitive data.This proposal considers the above fundamental problem by introducinga novel mechanism called secure and auditable privacycontracting (SAP-Contracting). An SAP-Contract can be used todefine a tradeoff between level of privacy and amount of datamining. Such a tradeoff can be negotiated and customized betweendata sources and data miners. An SAP-Contract defines precisely thefunctions and permitions that can be performed in personnel records.It aims to bridge the need for privacy with the need for datacollection, transfer, marketing and processing; thus, enablesensitive private data to be treated as a commodity.SAP-Contracting is different from the current state of art such asprivacy preserving data mining approaches since it does not rely onserver based data hiding. It complements and benefits from theresearch on cryptographic databases.The PIs propose to design, implement and test a prototype of thisparadigm to establish a proof of a concept and show provablesecurity properties of SAP-Contracts, includingconfidentiality, integrity, and auditability.If successful this project will provide provable and auditableprivacy. It will marry privacy and data mining research withdifferent economical models and venture into new research areas.

Proposal Number: 0751069PI: Bulent Yener Institution: Rensselaer Polytechnic InstituteProposal Number: 0751095PI: Aggelos Kiayias Institution: University of Connecticut Title: SGER: Collaborative Research: Secure and Auditable Privacy ContractsProposal AbstractOne of the major challenges imposed by the pervasiveness ofcyberspace is to ensure ``trust'' and design值得信赖的系统托西支持官方，商业和人类业务的关键基础设施。 数以百万计的日常用户通过互联网将其人事信息传递给其医疗保健提供者Totheir Banks，将保险公司和其他服务提供商传递给保险公司和其他服务提供商。在许多情况下，将这些人员信息转移到许多情况下，它将其输入其他方（其中一些甚至可能居住在Inforeign Inforeign Inforeign国家中）进行存储和处理。它可能被出售用于数据挖掘。私人数据的收集，处理和转售是amulti亿美元的行业，具有严重的安全性和隐私性，包括无意间揭示或失去数千或数百万的人的个人信息。当时有明确的知识发现，涉及商业知识，营销，保健设计，以及任何疾病，任何疾病，任何疾病，任何疾病，以及任何疾病，以及任何疾病，均一步，E. e. e. e.g。目前，生物战争实例``dataprowucer''（即我们所有人都像我们所有人一样）无法控制这样的私人和敏感的数据。该提案通过引入称为安全和可调的私密合同（sap contracting）来考虑上述基本问题。可以使用SAP合同来定义隐私级别和数据量之间的权衡。可以协商这种权衡并定制Betweendata来源和数据矿工。 SAP合同确切地定义了可以在人员记录中执行的功能和许可。它旨在弥合对数据进行，转移，营销和处理的需求的需求；因此，启用敏感的私人数据可以被视为商品。合同的合同不同于当前的最先进的保存数据挖掘方法，因为它不依赖基于OnServer的数据隐藏。它可以补充和搜索加密数据库中的利益。PIS建议设计，实施和测试此范式的原型，以建立概念的证明并显示SAP合同的ProvableSecurity属性，包括概念，完整性，完整性，可调节性和可调性。它将与具有不同的经济模型的隐私和数据挖掘研究结合，并冒险进入新的研究领域。