PrivacyCube A Tangible Device for Improving Privacy Awareness in IoT Bayan Al Muhander

2025-05-02 0 0 2.04MB 2 页 10玖币

侵权投诉

PrivacyCube: A Tangible Device for Improving

Privacy Awareness in IoT

Bayan Al Muhander

Cardiff University

Cardiff, UK

almuhanderb@cardiff.ac.uk

Omer Rana

Cardiff University

Cardiff, UK

RanaOF@cardiff.ac.uk

Nalin Arachchilage

University of Auckland

Auckland, New Zealand

nalin.arachchilage@auckland.ac.nz

Charith Perera

Cardiff University

Cardiff, UK

pererac@cardiff.ac.uk

Abstract—Consumers increasingly bring IoT devices into their

living spaces without understanding how their data is collected,

processed, and used. We present PrivacyCube, a novel tangible

device designed to explore the extent to which privacy awareness

in smart homes can be elevated. PrivacyCube visualises IoT

devices’ data consumption displaying privacy-related notices.

PrivacyCube aims at assisting families to (i) understand key

privacy aspects better and (ii) have conversations around data

management practices of IoT devices. Thus, families can learn

and make informed privacy decisions collectively.

Index Terms—Internet of Things, Privacy Awareness, Physical

Visualisation, Usable Privacy, Design Space

I. INTRODUCTION

Personal data protection regulations, such as the General

Data Protection Regulation (GDPR) and the California Con-

sumer Privacy Act (CCPA), have enforced transparency while

processing consumers’ data. Data controllers must provide

individuals with privacy notices about existing or potential

data processing practices. Prior studies discussed that effective

privacy notices support individuals in making informed privacy

decisions [1]. However, available notices are largely ignored

or abandoned and forgotten over time. Studies have linked the

failure of the privacy notices to the way they are presented,

where most of them are often long and difﬁcult to read [2].

Existing privacy notices designs are often limited by the

information presented to the data subjects, or are websites

speciﬁc and not IoT related [3]. Moreover, many of the

available privacy notices are static in nature, meaning they do

not receive updates and only display one type of notice with

no variation based on device/data type and use. The designed

tangible device in this paper is set to reform the presentation

of the privacy notices to include more meaningful information

for the user. Physical cubes, unlike mobile apps, have long

been used as a learning and exploration tool because they are

an appealing embodiment of more complicated concepts [4],

[5]. PrivacyCube can provide variable privacy notices based

on the used IoT device and the data it collects [6].

In this work, we prototype PrivacyCube, a physical tangible

notices for improving privacy awareness in smart homes, refer

to Figure 1. PrivacyCube will provide users with necessary

data practices of the IoT resources in the vicinity in an

interactive way. The notices displayed on PrivacyCube are

largely based on a privacy infrastructure developed by Das

et al. [7]. PrivacyCube will display the active IoT resources

and emit light for each data usage practice.

Fig. 1. PrivacyCube four faces: (i) collected data, (ii) data storage location

and retention period, (iii) data access, and (iv) data usage. (Demo Video)

II. IMPLEMENTATION

PrivacyCube is an interactive device that allows users to

explore and learn about the surrounding IoT devices and the

main data practises that the device performs on their data.

It is composed of a wooden casing shaped like a cube. The

casing is laser cut from 5 mm thick plywood and can be easily

assembled by slotting together with no tools required. There

is a 5-inch touch screen displaying the IoT devices on the top

face. The bottom face serves as the cube’s base, while the other

faces show data-related privacy notices. PrivceyCube will emit

lights as interactive privacy notices to users to mimic actual

data collection activity. Users can use the touch screen to

interact with PrivacyCube and explore related privacy notices.

Individuals are interested in receiving notiﬁcations related to

the collection, usage, storage of their data [7]. Therefore, the

data practices included in PrivacyCube notify individuals about

the collected data type, data usage, data access, data location,

and data retention period. Based on multiple privacy policies

templates included in the IoT Assistant App [8], we created

a graph, Figure 2, mapping the IoT devices displayed on

PrivacyCube. Each cube face represents different data practices

arXiv:2210.02650v1 [cs.CR] 6 Oct 2022

文档加载中……请稍候！
如果长时间未打开，您也可以点击刷新试试。

下载文档到电脑，查找使用更方便

10 玖币 0人已下载

立即下载

摘要：

PrivacyCube:ATangibleDeviceforImprovingPrivacyAwarenessinIoTBayanAlMuhanderCardiffUniversityCardiff,UKalmuhanderb@cardiff.ac.ukOmerRanaCardiffUniversityCardiff,UKRanaOF@cardiff.ac.ukNalinArachchilageUniversityofAucklandAuckland,NewZealandnalin.arachchilage@auckland.ac.nzCharithPereraCardiffUniversit...

展开>> 收起<<

PrivacyCube A Tangible Device for Improving Privacy Awareness in IoT Bayan Al Muhander.pdf

共2页,预览1页

还剩页未读，继续阅读

声明：本站为文档C2C交易模式，即用户上传的文档直接被用户下载，本站只是中间服务平台，本站所有文档下载所得的收益归上传人(含作者)所有。玖贝云文库仅提供信息存储空间，仅对用户上传内容的表现方式做保护处理，对上载内容本身不做任何修改或编辑。若文档所含内容侵犯了您的版权或隐私，请立即通知玖贝云文库，我们立即给予删除！

PrivacyCube A Tangible Device for Improving Privacy Awareness in IoT Bayan Al Muhander

相关推荐

开通VIP享超值会员特权

作者详情

相关内容

热门标签

举报选择: