Privacy-Aware Service Integration

Pierre Parrend (1) , Stéphane Frénot (1, 2) , Sebastian Hoehn (3)

1 ARES - Architectures of networks of services
2 TC - Département Télécommunications Services & Usages
3 IIG Telematik - Department of Telematics

Privacy mechanisms exist for monolithic systems. How- ever, pervasive environments that gather user data to sup- port advanced services provide little control over the data an individual releases. This is a strong inhibitor for the de- velopment of pervasive systems, since most users do not ac- cept that their personal information is sent out to the wild, and potentially passed over to third party systems. We therefore propose a framework to support user con- trol over the data made available to service providers in the context of an OSGi based Extensible Service Systems. A formal privacy model is defined and service and policy descriptions are deduced. Technical system requirements to support these policies are identified. Since guaranteeing privacy inside the system is of little help if any malicious en- tity can break into it, a security architecture for OSGi based Extensible Service Systems is also defined.

Mots clés: Privacy; Service Integration

Domaines: Cryptographie et sécurité [cs.CR]; Informatique ubiquitaire

Pierre Parrend, Stéphane Frénot, Sebastian Hoehn. Privacy-Aware Service Integration. 2nd IEEE International Workshop on Services Integration in Pervasive Environments, Jul 2007, Istanbul, Turkey. ⟨inria-00275184⟩