| |
Click here for full text:
MUPPET: Mobile Ubiquitous Privacy Protection for Electronic Transactions
Cheng, Winnie; Li, Jun; Moore, Keith; Karp, Alan H.
HPL-2006-141R1
Keyword(s): mobile technologies; privacy; security; access control; database; ubiquitous computing; information management; services infrastructure
Abstract: Mobile companions such as smartphones and PDAs are very personal and carry a lot of sensitive data about their owners. With new services aimed at providing more targeted information retrieval through increased interactions with these devices, privacy concerns of individuals must be addressed. Existing solutions give users little control over release of this information. MUPPET is a privacy-aware information brokerage framework that incorporates a number of novel techniques to give users control over the release of their data. First, it introduces Operation-focused Access Control, a purpose-based access control model that supports flexible and fine-grain policies using typed operation labels. Second, our system allows Reward- Driven Information Exchange. It provides a protocol for explicit communication of justifications and rewards and tunable privacy policies based on ongoing evaluation of the information exchange. Third, MUPPET includes a Purpose Detection Engine with an intuitive user interface for purpose management and supports explicit as well as implicit purpose activations based on context or authorizations. To validate our design, the MUPPET prototype has been integrated with a coupon personalization application for two different service providers in an experimental retail kiosk setting.
10 Pages
Back to Index
|
Printable version
