Download VINNOVA_Integritet_2006-09-22.pdf

Contents : Integritetsskydd och infrastruktur Project description p. 1 Titel: Integritetsskyddande teknik p Internet och infrastrukturer f r konsumentr tt Title Privacy technology in the framework of consumer support infrastructure Sammanfattning F rstudien ska behandla tekniker f r hur Internetanv ndare ska k nna sig trygga p n tet. Det mesta av den tekniska utveckling som p g r inom omr det koncentrerar sig p att f rhindra att anv ndare r kar illa ut. Mycket mindre g rs f r att hj lpa folk att ta tillvara sina r ttigheter och hj lpa dem n r de har problem. F rstudien mnar s tta in dessa tekniska l sningar i ett st rre sammanhang f r att kunna beskriva m jligheter att utveckla mer fullst ndiga l sningar som v ver in europeiska konsumentorganisationer datainspektioner m.fl. i den assistans som erbjuds vanliga anv ndare/medborgare. Abstract The pilot study proposed here aims to identify the interfaces between technologybased trust systems and other trust systems specifically in order to identify possibilities to develop more complete user side privacy-enhancing identity management systems. It would not be directly a technological project but more an attempt to fit privacy-enhancing technology into the frameworks of consumer organisations and data inspection boards and to outline usable user side software for exercising privacy rights. Relevance of the proposed pilot study This project is carried out in order to describe an R&D area beskriva ett FoUomr de which we do not see properly defined yet. While Internet commerce of various sorts are blooming a lot of people are afraid of using many commercial services because of the risk of loosing control of personal data of identity theft and of credit card frauds (PTS 2003). This will possibly also hamper the adoption of more interactive and personalised e-government and e-health services. Different organisations are working for a safer networked community. Naturally a lot of attention has been focused on computer security. Data has to be transferred and stored securely to prevent misuse of data. There is also a focus on privacy-enhancing mechanisms which is a focus that by necessity has to be broader than the technological one good privacy protection needs also legal and jurisdictional backing. In fact the privacy question has very much to do with trust: the user of an e-service has to trust the technology as such trust himself that he understands the terms and conditions under which he provides data in order to be served trust the service provider trust that laws and regulations have been written to support him trust the jurisdictional system and trust organisations which are making claims to support fair processing of data and consumer s rights (Andersson et al 2005). The project proposed here aims to identify the interfaces between technically-based trust systems and other trust systems specifically in order to identify possibilities to develop more complete user side privacy-enhancing identity management systems. It would not define the research area for strictly technological projects but rather be an Integritetsskydd och infrastruktur Project description p. 2 attempt to conceptually fit privacy technology into the frameworks of consumer organisations and data inspection boards as well as into usable software for exercising privacy rights. Our motivation for the need for such work comes from usability studies carried out in connection with the EU integrated project PRIME Privacy and Identity Management for Europe (PRIME web). We have pinpointed various assistance needs that people may have even when they are in possession of a privacy and identity managing system and partly verified user accaptance of such aid in small scale usability tests: One part is how to connect to a previous service provider in order to have information on what data is stored about them and for what reason only onethird of EU citizen actually knows of their rights to do this (Eurobarometer 2003 Q33 a.2). Thus the user s system should both help the user exersicing his rights as well as help the user to understand that he has rights and what these are. Another one is how to get assistance outside the privacy-enhancing system itself. This could consist of getting in contact with the data processors but also consumers organisations or even the authorities monitoring the application of data protection laws. According to the Eurobarometer The level of knowledge about the existence of these independent authorities was low across the European Union and two-thirds (68%) of EU citizens were not aware of their existence. This shows that users need guidance by the system in order to get in contact with the external assistance. A third kind of assistance includes how to check the privacy standards of a data processor both organisational and technical. There exist already so-calle

INFO HASH : 1adcc497c5edee49606ca0f7d77527813fa1ad82

Download now

File Size: 70.8 kb