Protecting the privacy of user's QoS preferences for multimedia applications

ABSTRACT

Privacy violation is a serious and pressing problem for Internet users that requires immediate solution. This problem is very serious for applications that require the user's identity and QoS preferences like IP-telephony and videoconference applications. In this paper, we will identify the risks of privacy invasion during the setup of interactive multimedia applications, and introduce three schemes to solve the problem of protecting the user's privacy, with varying degree of complexities. The first approach is based on the use of a trusted third party; this has been a common approach for the Public Switched Telephony Network (PSTN). The second approach is based on the trust relationship between the communicating parties, and the third approach is based on primitives from the field of secure distributed computation

REFERENCES

• 1: Aldrich, S. E., Marks, R. T., Frey, M. M., Goulde, M. A., Lewis, J. M., and Seybold, P. B.. What kind of the Total Customer Experience Does Your E-business Deliver? Patricia Seybold Group, August 2000.
• 2: Lauralee Alben, Quality of experience: defining the criteria for effective interaction design, interactions, v.3 n.3, p.11-15, May/June 1996 [doi>10.1145/235008.235010]
• 3: Anonymizer Software. http://www.anonymizer.com. Accessed on July 28, 2006.
• 4: Bauer, B., and Patrick, A.S. A Human Factors Extension to the Seven-Layer OSI Reference Model. Retrieved January 6, 2004, from http://www.andrewpatrick.ca/OSI/10layer.html
• 5: Bohrer, K. and Holland, B. Customer Profile Exchange (CPExchange) Specification Version 1 .0, October 20 2000. URL: http://www.cpexchange.org/standard/cpexchangev1 0F.pdf
• 6: Borking, J. Proposal for Building a Privacy Guardian for the Electronic Age. In H. Federrath, editor, Anonymity 2000, Volume 2009 of Lecture Notes in Computer Science, Pages 130--140, Springer-Verlag, 2000.
• 7: Yan-Cheng Chang , Chi-Jen Lu, Oblivious Polynomial Evaluation and Oblivious Neural Learning, Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology, p.369-384, December 09-13, 2001
• 8: Cranor, L., Langheinrich, M. and Marchiori, M. Platform for Privacy Preferences Project. http://w3c.org/p3p. Accessed on July 28, 2006.
• 9: Cranor, L., Langheinrich, M. and Marchiori, M. A P3P Preference Exchange Language. http://www.w3.org/TR/P3P-references/. Accessed on July 28, 2006.
• 10: K. El-Khatib , Zhen E. Zhang , N. Hadibi , G. V. Bochmann, Personal and service mobility in ubiquitous computing environments: Research Articles, Wireless Communications & Mobile Computing, v.4 n.6, p.595-607, September 2004 [doi>10.1002/wcm.v4:6]
• 11: Empririx.. Assuring QoE on Next generation Networks. White paper.
• 12: Shimon Even , Oded Goldreich , Abraham Lempel, A randomized protocol for signing contracts, Communications of the ACM, v.28 n.6, p.637-647, June 1985 [doi>10.1145/3812.3818]
• 13: Even, S., Goldreich, O., and Lempel, A. A randomized protocol for signing contracts. (extended abstract). In Advances in Cryptology: Proceedings of Crypto 82, pages 205--210. Plenum Press, New York and London, 1983, 23--25 Aug, 1982.
• 14: Eran Gabber , Phillip B. Gibbons , Yossi Matias , Alain J. Mayer, How to Make Personalized Web Browising Simple, Secure, and Anonymous, Proceedings of the First International Conference on Financial Cryptography, p.17-32, February 24-28, 1997
• 15: Niv Gilboa, Two Party RSA Key Generation, Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology, p.116-129, August 15-19, 1999
• 16: Goldreich, O., Micali, S., and Wigderson, A. Proofs that Yield Nothing but their Validiaty, and a Methodology of Cryptographic Protocol Design. In Journal of the ACM, vol. 38, 1991, pp. 691--729.
• 17: Joseph Y. Halpern , Michael O. Rabin, A logic to reason about likelihood, Proceedings of the fifteenth annual ACM symposium on Theory of computing, p.310-319, December 1983 [doi>10.1145/800061.808760]
• 18: M. Handley , V. Jacobson, SDP: Session Description Protocol, RFC Editor, 1998
• 19: Hes, R. and Borking, J. Privacy-Enhancing Technolgies: The Path to Anonymity. Revised Edition. A&V-11. Den Haag: Registratiekamer, 1998.
• 20: In the Matter of GeoCities, a corporation, FTC File No. 9823015 http://www.ftc.gov/os/1999/9902/9823015cmp.htm.
• 21: Y. Ishai , E. Kushilevitz, Randomizing polynomials: A new representation with applications to round-efficient secure computation, Proceedings of the 41st Annual Symposium on Foundations of Computer Science, p.294, November 12-14, 2000
• 22: ITU-T Recommendation H.323. Packet-Based Multimedia Communications Systems. February 1998.
• 23: Klyne, G. et. al. Composite Capability/Preference Profiles (CC/PP). http://www.w3.org/Mobile/CCPP/. Accessed on May11, 2004.
• 24: Kutscher, D., Ott J., and Bormann C. Session Description and Capability Negotiation," Internet Draft draft-ietf-mmusic- sdpng-07.txt, October 2003.
• 25: Yehuda Lindell , Benny Pinkas, Privacy Preserving Data Mining, Proceedings of the 20th Annual International Cryptology Conference on Advances in Cryptology, p.36-54, August 20-24, 2000
• 26: Maxware Software. http://www.maxware.com. Accessed on July 28, 2006.
• 27: Moorsel, A. v., Metrics for the internet age: Quality of experience and quality of business. Technical report no: HPL-2001-179, http://www.hpl.hp.com/techreports
• 28: Moni Naor , Benny Pinkas, Oblivious transfer and polynomial evaluation, Proceedings of the thirty-first annual ACM symposium on Theory of computing, p.245-254, May 01-04, 1999, Atlanta, Georgia, United States [doi>10.1145/301250.301312]
• 29: Nilsson, M., Lindskog, H., and Fischer-Hubner, S. Privacy Enhancement in the Mobile Internet. In proceedings of the IFIP WG 9.6/11.7 Working Conference on Security and Control of IT in Society, Bratislava, June 15--16, 2001, ISBN 3-901882-13-8.
• 30: O¿Neil, T. M., Quality of Experience and Quality of Service, For IP Video Conferencing. White Paper by Polycom.
• 31: Abdelmounaam Rezgui , Mourad Ouzzani , Athman Bouguettaya , Brahim Medjahed, Preserving privacy in web services, Proceedings of the 4th international workshop on Web information and data management, November 08-08, 2002, McLean, Virginia, USA [doi>10.1145/584931.584944]
• 32: Richards, A., Rogers, Witana, G., V., and Antoniades, M. Mapping User Level QoS from a Single Parameter. In Second IFIP/IEEE International Conference on Management of Multimedia Networks and Services, Versailles, November 1998.
• 33: J. Rosenberg , H. Schulzrinne , G. Camarillo , A. Johnston , J. Peterson , R. Sparks , M. Handley , E. Schooler, SIP: Session Initiation Protocol, RFC Editor, 2002
• 34: Seamons, K. E., Winslett, M., Yu, T., Yu, L., and Jarvis, R. Protecting Privacy during On-line Trust Negotiation. 2nd Workshop on Privacy Enhancing Technologies, San Francisco, CA, April 2002.
• 35: Siller, M. and Woods, JC, Improving Quality of Experience for Multimedia Services by QoS Arbitration on a QoE Framework. International Conference on Packet Video, 28-29 April 2003, Nantes, France.
• 36: Tamaru, S., Nakazawa, J., Takashio, K., Tokuda, H. PPNP: A Privacy Profile Negotiation Protocol for Services in Public Spaces. First International Workshop on Ubiquitous Systems for Supporting Social Interaction and Face-to-Face Communication in Public Spaces at the Ubicomp 2003 Conference.
• 37: George Yee , Larry Korba, Bilateral E-services Negotiation Under Uncertainty, Proceedings of the 2003 Symposium on Applications and the Internet, p.352, January 27-31, 2003
• 38: Zandbelt, H., Hulsebosch, B., and Eertink, H. Internet Draft Telematica Instituut draft-zandbelt-idsec-01.txt. May 2002.
• 39: Dong Mei Zhang , Wai Yat Wong, A Web-Based Negotiation Agent Using CBR, Revised Papers from the PRICAI 2000 Workshop Reader, Four Workshops held at PRICAI 2000 on Advances in Artificial Intelligence, p.183-198, August 28-September 01, 2000

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Applications (SMTP, FTP, etc.)

General Terms:
Algorithms, Security

Keywords:
multimedia application, negotiation, oblivious polynomial evaluation, oblivious transfer, privacy, quality of service, user preferences, user's satisfaction