arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2003.04969cs.CRcs.DBcs.DCcs.DS
收藏

IoT删除:实施IoT数据的可验证保留

IoT Expunge: Implementing Verifiable Retention of IoT Data

Nisha Panwar, Shantanu Sharma, Peeyush Gupta, Dhrubajyoti Ghosh, Sharad Mehrotra, Nalini Venkatasubramanian

摘要:

物联网(IoT)系统的不断发展旨在通过提供多种增值服务来简化最终用户的日常生活。然而,物联网系统可能会捕获和存储有关云中个人的敏感个人数据,从而危及用户隐私。新兴的立法,如加州的CalOPPA和欧洲的GDPR,支持强有力的隐私法来保护云中的个人数据。其中一项法律涉及严格执行数据保留政策。本文提出了一个名为IoT Expunge的框架,该框架允许传感器数据提供商将数据存储在云平台中,以确保执行保留策略。此外,云提供商还提供可验证的证据,证明其遵守保留策略。在现实世界的智能建筑测试平台上的实验结果表明,IoT Expunge对用户施加了最小的开销,以根据数据保留策略验证数据。

英文摘要:

The growing deployment of Internet of Things (IoT) systems aims to ease the daily life of end-users by providing several value-added services. However, IoT systems may capture and store sensitive, personal data about individuals in the cloud, thereby jeopardizing user-privacy. Emerging legislation, such as California's CalOPPA and GDPR in Europe, support strong privacy laws to protect an individual's data in the cloud. One such law relates to strict enforcement of data retention policies. This paper proposes a framework, entitled IoT Expunge that allows sensor data providers to store the data in cloud platforms that will ensure enforcement of retention policies. Additionally, the cloud provider produces verifiable proofs of its adherence to the retention policies. Experimental results on a real-world smart building testbed show that IoT Expunge imposes minimal overheads to the user to verify the data against data retention policies.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑