Trustworthy Infrastructure for PDM

Digital Enlightenment Forum 2013Brussels, 18-20 Sept. 2013

Ioannis KrontirisGoethe University Frankfurt

Privacy-ABCs

• Benefits of Privacy-ABCs

– Privacy-ABCs are by default untraceable (no user-tracking)

– Enable minimal disclosure (user reveals only the necessary information)

– User can chose to stay anonymous or generate (unlimited number of) pseudonyms

– Advanced security (no sharing of credentials, device-binding for extra protection)

• ABC4Trust objectives: A common, unified architecture for ABC systems to enable

– Comparing their respective features

– Combining them on common platforms – reference implementation – 2 pilots

– “Lock-In” free usage of ABC systems

• Raise trust in privacy-ABC technologieshttp://abc4trust.eu/

ABC4Trust - About

• Scheduled duration: November 2010 – February2015

• Funding: The ABC4Trust project receives research funding from the European Union's Seventh Framework Programme under grant agreement n° 257782 as part of the “ICT Trust and Security Research” theme.

• Web Page: www.abc4trust.eu

ABC4Trust @GitHub

• https://github.com/p2abcengine/

• Source codes available under Apache license

• Documentation, installation guide and wiki pages

Pilot Applications

• Norrtullskolan School, Söderhamn, Sweden

• School internal social network for communication among pupils, teachers, and personnel

• Sept 2013 – Dec 2013

• University of Patras, Greece

• Course ratings conducted anonymously without lecturers knowing participants’ identities

• Conduct polls based on attendance

• Oct 2013 – Jan 2014

Privacy-ABCs and eIDs

• eID cards a gateway to personal information with risks to the privacy of citizens– Build privacy-respecting architectures that prevent tracking of

the citizen

• Achieving international interoperability is an important goal– Build privacy preserving solutions that can be deployed for

trans-border uses within the EU

Challenges ahead

• Address usability issues– innovative tools, such as “virtual care-takers,” to empower users make

decisions that they cannot understand or evaluate properly

• Address engineering problems– integrating privacy technologies on large scale deployments is still ill

understood

– examine methods of evaluation, criteria and metrics

• Address continuously new data collection practices and data flows – Data treated by cloud-based applications

– Sensors that collect personal information

Ioannis Krontiris {ikrontiris@gmx.de},

Goethe University Frankfurt, Germany

Thank you!