Thomas L\u00e4nger (University Of Lausanne) and Henrich C. P\u00f6hls (University of Passau) presented PRISMACLOUD project during\u00a0 ITA: TA16-Konferenz on 30th May 2016 in Vienna, Austria, talking about\u00a0Enhancing \u201cSmart Services\u201d with cryptography for the benefit of the individual end user.<\/p>\n
The abstract of the presentation is following:<\/p>\n
The Internet of Things, and its use in all kinds of \u201cSmart Services\u201d is just another manifestation of the ongoing embracement of our physical and informational world by information and communication technologies. Smart Services could be just another area of application adding end user convenience and benefit, while at the same time providing the desperately needed market growth and new opportunities for different economic sectors. But on the other side, these new technologies belong to the latest alarming trends feeding the virtually bottomless information repositories hidden behind the opaque veils of storage and computing clouds with still more personal and private data of individuals\u2014to be accumulated, related, processed and assessed with Big Data technologies for commercialisation by data brokers and exploitation by surveillance organisations.
\nWith its intended pervasiveness and penetration into areas which previously were strictly private for the individual, the wave of Smart Services constitutes a major threat to individuals\u2019 privacy, and with its dedicated relation to the physical world also to the individuals\u2019 physical security and safety. Related risks include technical risks, governance and control risks, and especially a huge set of data protection and privacy risks. These risks are currently addressed by organisational measures, like best practices and service level agreements\u2014but such instruments are often insufficient because they rely on the benevolence of the data processor and neither can strict adherence be effectively controlled nor can violations thereof be proven by the individual or data subject.
\nTo mitigate that developing security and privacy disaster, and to reinstate governance and control on behalf of the data subject or end user, the European integrated research project PRISMACLOUD (\u201cPrivacy and Security Maintaining Services in the Cloud\u201d, Feb 2015-Aug 2018) of the Horizon 2020 research programme proposes the application of recent cryptographic techniques. Goal is to provide effective end-to-end security and privacy, and to technically enforce the desired security and privacy properties in three critical areas: (i) Data storage in the cloud, (ii) user privacy protection and data minimisation and (iii) authentication of stored and processed data. Secret sharing technology facilitates secure data storage in the public cloud without requiring a complex cryptographic key management on the user side. Smart Services can be equipped with anonymous credentials to facilitate non-identifiable and untrackable service use and minimisation of private data exposure. Efficient data anonymisation technologies can provide an effective protection against linking data to individuals. Specific malleable signatures protect the authenticity of data handed to smart services for processing, while at the same time enabling the user to effectively blank out information which is not crucial for the service and may be exploited beyond the intended use of the service.
\nIn the center of the presentation stand nine newly developed cloud security patterns, describing recurring situations in the virtual worlds of clouds and Smart Services where security and privacy is at risk for end users, and an assessment of the potential impact of applying in these situations the mentioned cutting-edge privacy and security technologies for effectively increasing end user security and privacy.<\/p>\n
Download the presentation abstract in English<\/a>
\nDownload the presentation abstract in German<\/a>
\nDownload the presentation in German<\/a><\/p>\n