a policy based infrastructure for social data access with privacy guarantees
DESCRIPTION
A Policy Based Infrastructure for Social Data Access with Privacy Guarantees. Tim Finin (UMBC) for: Palanivel Kodeswaran (UMBC) Evelyne Viegas (Microsoft Research) POLICY 2010, Fairfax VA 21 July 2010. http://ebiquity.umbc.edu/paper/html/id/493/. Connected Data. - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/1.jpg)
A Policy Based Infrastructurefor Social Data Access
with Privacy GuaranteesTim Finin (UMBC) for:
Palanivel Kodeswaran (UMBC) Evelyne Viegas (Microsoft Research)
POLICY 2010, Fairfax VA21 July 2010
http://ebiquity.umbc.edu/paper/html/id/493/
![Page 2: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/2.jpg)
Connected Data• We “leave” our digital
footprints online in discussion forums, social networks, web searches
• Copying and sharing Data is easy
• Users have no control over how their data is used and inferences that can be made based on their data
![Page 3: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/3.jpg)
Personalization
Garden Veggie with minimal
cheese
![Page 4: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/4.jpg)
Personalization?
That’s not enough running!!
Sub: Insurance RenewalDear John,In reviewing your record, we have decided to increase your premium to better serve your needs and that of your family.
![Page 5: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/5.jpg)
User Control over Private Data
There is a need for a framework in which users can specify their privacy preferences in terms of who can access their data and how it can be used
Sticky Policy
Phone Number
Phone number can be used for emergency contact
Phone number can’t be used for marketing
![Page 6: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/6.jpg)
Data Sharing for Scientific Research
• Large amounts of Data behind closed walls – Medical data, search data, finance data
• Trend continues with user generated data as well– Facebook, Health Vault
• Researchers can benefit from access to this data– User trends, epidemiology models, search ranking– Most research can be performed with aggregate data
• But remember the AOL fiasco
![Page 7: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/7.jpg)
Policy Based Infrastructure
We’ve describe a policy-based infrastructure that– Allows users to specify who can access what and
why – Adds additional access modes for releasing data
at different granularities– Extends the traditional binary semantics of
access control viz. allow/deny with emerging privacy preserving analysis techniques
![Page 8: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/8.jpg)
Complete Access
Facebook FriendsHealth Vault Custodian & Invitee
Picture from [ars]
Access to the complete and detailed data
![Page 9: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/9.jpg)
Abstract Access
Financial Websites like Covester allow sharing abstract portfolio information
Google Latitude for location information
Picture from [gpsobsessed]
Access to data encoded using more general,abstract concepts, e.g., in Baltimore asopposed to at given lat-lon coordinates
![Page 10: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/10.jpg)
Statistical AccessUser trends in search data using differential privacy
The number of distinct users searching over the duration of a day at different epsilon levels
C. Dwork, Differential privacy, Int. Col. Automata, languages and programming, pp. 1-12, Springer, 2006.
![Page 11: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/11.jpg)
Example Policies
Alice says ?Bob can readCompleteAccess /MyHealth
if ?Bob is PrimaryPhysician
Alice says ?Bob can readAbstractAccess /MyFinance
if ?Bob is InvestorFriend
MS says ?Bob can readStatisticalAccess /SearchData
if ?Bob is Researcher
![Page 12: A Policy Based Infrastructure for Social Data Access with Privacy Guarantees](https://reader035.vdocuments.mx/reader035/viewer/2022070423/568167cf550346895ddd21c2/html5/thumbnails/12.jpg)