An architecture for privacy-sensitive ubiquitous computing

ABSTRACT

Privacy is the most often-cited criticism of ubiquitous computing, and may be the greatest barrier to its long-term success. However, developers currently have little support in designing software architectures and in creating interactions that are effective in helping end-users manage their privacy. To address this problem, we present Confab, a toolkit for facilitating the development of privacy-sensitive ubiquitous computing applications. The requirements for Confab were gathered through an analysis of privacy needs for both end-users and application developers. Confab provides basic support for building ubiquitous computing applications, providing a framework as well as several customizable privacy mechanisms. Confab also comes with extensions for managing location privacy. Combined, these features allow application developers and end-users to support a spectrum of trust levels and privacy needs.

REFERENCES

• 1: AllNurses.com. http://allnurses.com/
• 2: Directive 95/46/EC. http://europa.eu.int/ISPO/legal/en/dataprot/directiv/directiv.html
• 3: MedicAlert. http://www.medicalert.org
• 4: Gregory D. Abowd , Christopher G. Atkeson , Jason Hong , Sue Long , Rob Kooper , Mike Pinkerton, Cyberguide: a mobile context-aware tour guide, Wireless Networks, v.3 n.5, p.421-433, Oct. 1997 [doi>10.1023/A:1019194325861]
• 5: Anne Adams, Multimedia information changes the whole privacy ballgame, Proceedings of the tenth conference on Computers, freedom and privacy: challenging the assumptions, p.25-32, April 04-07, 2000, Toronto, Ontario, Canada [doi>10.1145/332186.332199]
• 6: Mike Addlesee , Rupert Curwen , Steve Hodges , Joe Newman , Pete Steggles , Andy Ward , Andy Hopper, Implementing a Sentient Computing System, Computer, v.34 n.8, p.50-56, August 2001 [doi>10.1109/2.940013]
• 7: AT&T, AT&T Wireless mMode - Find Friends. http://www.attwireless.com/mmode/features/findit/FindFriends/
• 8: Barkhuus, L. and A.K. Dey. Location-based services for mobile telephony: a study of users' privacy concerns. In Proceedings of INTERACT 2003, 9th IFIP TC13 International Conference on Human-Computer Interaction. pp. To appear 2003.
• 9: Bellotti, V. and A. Sellen. Design for Privacy in Ubiquitous Computing Environments. In Proceedings of The Third European Conference on Computer Supported Cooperative Work (ECSCW'93). Milan, Italy: Kluwer Academic Publishers 1993.
• 10: Alastair R. Beresford , Frank Stajano, Location Privacy in Pervasive Computing, IEEE Pervasive Computing, v.2 n.1, p.46-55, January 2003 [doi>10.1109/MPRV.2003.1186725]
• 11: Brin, D., The Transparent Society. Reading, MA: Perseus Books, 1998.
• 12: P. J. Brown , G. J. F. Jones, Context-aware Retrieval: Exploring a New Environment for Information Retrieval and Information Filtering, Personal and Ubiquitous Computing, v.5 n.4, p.253-263, December 2001 [doi>10.1007/s007790170004]
• 13: Jenna Burrell , Geri K. Gay , Kiyo Kubo , Nick Farina, Context-Aware Computing: A Test Case, Proceedings of the 4th international conference on Ubiquitous Computing, p.1-15, September 29-October 01, 2002, Göteborg, Sweden
• 14: Cadiz, J. and A. Gupta, Privacy Interfaces for Collaboration. Technical Report MSR-TR-2001-82, Microsoft Research, Redmond, WA 2001.
• 15: Castro, P. and R. Muntz, Managing Context for Smart Spaces. IEEE Personal Communications 2000. 5(5).
• 16: Guanling Chen , David Kotz, Context Aggregation and Dissemination in Ubiquitous Computing Systems, Proceedings of the Fourth IEEE Workshop on Mobile Computing Systems and Applications, p.105, June 20-21, 2002
• 17: James L. Crowley , Joëlle Coutaz , Gaeten Rey , Patrick Reignier, Perceptual Components for Context Aware Computing, Proceedings of the 4th international conference on Ubiquitous Computing, p.117-134, September 29-October 01, 2002, Göteborg, Sweden
• 18: Cuellar, J., J. John B. Morris, D. Mulligan, J. Peterson, and J. Polk, Geopriv requirements (Internet Draft). 2003, IETF. http://www.ietf.org/internet-drafts/draft-ietf-geopriv-reqs-04.txt
• 19: N. Davies , S. P. Wade , A. Friday , G. S. Blair, Limbo: a tuple space based platform for adaptive mobile applications, Proceedings of the IFIP/IEEE international conference on Open distributed processing and distributed platforms, p.291-302, May 1997, Toronto, Ontario, Canada
• 20: Dey, A.K., D. Salber, and G.D. Abowd, A Conceptual Framework and a Toolkit for Supporting the Rapid Prototyping of Context-Aware Applications. Human-Computer Interaction (HCI) Journal 2001. 16(2-3): p. 97--166.
• 21: Doheny-Farina, S., The Last Link: Default = Offline, Or Why Ubicomp Scares Me, Computer-mediated Communication, vol. 1(6): pp. 18--20, 1994.
• 22: Edwards, J., Location Privacy Protection Act of 2001. http://www.techlawjournal.com/cong107/privacy/location/s1164is.asp
• 23: W. Keith Edwards , Mark W. Newman , Jana Sedivy , Shahram Izadi, Challenge:: recombinant computing and the speakeasy approach, Proceedings of the 8th annual international conference on Mobile computing and networking, September 23-28, 2002, Atlanta, Georgia, USA [doi>10.1145/570645.570680]
• 24: Fredrik Espinoza , Per Persson , Anna Sandin , Hanna Nyström , Elenor Cacciatore , Markus Bylund, GeoNotes: Social and Navigational Aspects of Location-Based Information Systems, Proceedings of the 3rd international conference on Ubiquitous Computing, p.2-17, September 30-October 02, 2001, Atlanta, Georgia, USA
• 25: Jennica Falk , Peter Ljungstrand , Staffan Björk , Rebecca Hansson, Pirates: proximity-triggered interaction in a multi-player game, CHI '01 extended abstracts on Human factors in computing systems, March 31-April 05, 2001, Seattle, Washington [doi>10.1145/634067.634140]
• 26: Federal Communications Commission, Enhanced 911. http://www.fcc.gov/911/enhanced/
• 27: Frelinghuysen, R., Wireless Privacy Protection Act of 2003. http://www.theorator.com/bills108/hr71.html
• 28: Simson Garfinkel, Database nation: the death of privacy in the 21st century, O'Reilly & Associates, Inc., Sebastopol, CA, 2001
• 29: Geocaching. http://www.geocaching.com/
• 30: Grimm, R., J. Davis, E. Lemar, A. Macbeth, S. Swanson, T. Anderson, B. Bershad, G. Borriello, S. Gribble, and D. Wetherall, Programming for pervasive computing environments. Technical Report UW-CSE-01-06-01, University of Washington Department of Computer Science and Engineering, Seattle, WA 2001.
• 31: Griswold, W.G., P. Shanahan, S.W. Brown, and R. Boyer, ActiveCampus - Experiments in Community-Oriented Ubiquitous Computing. Technical Report CS2003-0765, Computer Science and Engineering, UC San Diego 2003.
• 32: Grudin, J., Desituating Action: Digital Representation of Context. Human-Computer Interaction (HCI) Journal 2001. 16(2-4).
• 33: Grudin, J. and E. Horvitz, Presenting choices in context: approaches to information sharing. 2003: Workshop on Ubicomp communities: Privacy as Boundary Negotiation. http://guir.berkeley.edu/pubs/ubicomp2003/privacyworkshop/papers.htm
• 34: Gruteser, M. and D. Grunwald. Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking. In Proceedings of The First International Conference on Mobile Systems, Applications, and Services (MobiSys 2002) 2002.
• 35: Harper, R.H.R., Why Do People Wear Active Badges? Technical Report EPC-1993-120, Rank Xerox, Cambridge 1993.
• 36: Heer, J., A. Newberger, C. Beckmann, and J.I. Hong. liquid: Context-Aware Distributed Queries. In Proceedings of Fifth International Conference on Ubiquitous Computing: Ubicomp 2003. Seattle, WA: Springer-Verlag. pp. 140--148 2003.
• 37: Debby Hindus , Scott D. Mainwaring , Nicole Leduc , Anna Elizabeth Hagström , Oliver Bayley, Casablanca: designing social communication devices for the home, Proceedings of the SIGCHI conference on Human factors in computing systems, p.325-332, March 2001, Seattle, Washington, United States [doi>10.1145/365024.383749]
• 38: Hong, J.I., G. Boriello, J.A. Landay, D.W. McDonald, B.N. Schilit, and J.D. Tygar. Privacy and Security in the Location-enhanced World Wide Web. In Proceedings of Fifth International Conference on Ubiquitous Computing: Ubicomp 2003 (Workshop on Ubicomp Communities: Privacy as Boundary Negotiation). Seattle, WA 2003.
• 39: IBM Corporation, Enterprise Privacy Authorization Language (EPAL 1.1). http://www.zurich.ibm.com/security/enterprise-privacy/epal/Specification/
• 40: Jiang, X., N.Y. Chen, J.I. Hong, K. Wang, L.A. Takayama, and J.A. Landay. Siren: Context-aware Computing for Firefighting. In Proceedings of The Second International Conference on Pervasive Computing (Pervasive 2004). Vienna, Austria. pp. To Appear 2004.
• 41: Xiaodong Jiang , Jason I. Hong , James A. Landay, Approximate Information Flows: Socially-Based Modeling of Privacy in Ubiquitous Computing, Proceedings of the 4th international conference on Ubiquitous Computing, p.176-193, September 29-October 01, 2002, Göteborg, Sweden
• 42: Brad Johanson , Armando Fox , Terry Winograd, The Interactive Workspaces Project: Experiences with Ubiquitous Computing Rooms, IEEE Pervasive Computing, v.1 n.2, p.67-74, April 2002 [doi>10.1109/MPRV.2002.1012339]
• 43: Eija Kaasinen, User needs for location-aware mobile services, Personal and Ubiquitous Computing, v.7 n.1, p.70-79, May 2003 [doi>10.1007/s00779-002-0214-7]
• 44: Eija Kaasinen, User needs for location-aware mobile services, Personal and Ubiquitous Computing, v.7 n.1, p.70-79, May 2003 [doi>10.1007/s00779-002-0214-7]
• 45: Korba, L. and S. Kenny. Towards Meeting the Privacy Challenge: Adapting DRM. In Proceedings of 2002 ACM Workshop on Digital Rights Management. Washington DC, USA 2002.
• 46: Lamming, M. and M. Flynn. Forget-me-not: Intimate computing in support of human memory. In Proceedings of FRIEND 21: International Symposium on Next Generation Human Interfaces. Meguro Gajoen, Japan. pp. 125--128 1994.
• 47: Marc Langheinrich, A Privacy Awareness System for Ubiquitous Computing Environments, Proceedings of the 4th international conference on Ubiquitous Computing, p.237-245, September 29-October 01, 2002, Göteborg, Sweden
• 48: Marc Langheinrich, Privacy by Design - Principles of Privacy-Aware Ubiquitous Systems, Proceedings of the 3rd international conference on Ubiquitous Computing, p.273-291, September 30-October 02, 2001, Atlanta, Georgia, USA
• 49: Scott Lederer , Jennifer Mankoff , Anind K. Dey, Who wants to know what when? privacy preference determinants in ubiquitous computing, CHI '03 extended abstracts on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/765891.765952]
• 50: Lessig, L. The Architecture of Privacy. In Proceedings of Taiwan NET'98. Taipei, Taiwan 1998.
• 51: Mayor, M., New Wireless Device Could Rescue Firefighters. 2001. http://www.wirelessnewsfactor.com/perl/story/9134.html
• 52: Kris Nagel , Cory D. Kidd , Thomas O'Connell , Anind K. Dey , Gregory D. Abowd, The Family Intercom: Developing a Context-Aware Audio Communication System, Proceedings of the 3rd international conference on Ubiquitous Computing, p.176-183, September 30-October 02, 2001, Atlanta, Georgia, USA
• 53: Dan R. Olsen, Jr. , Sean Jefferies , Travis Nielsen , William Moyes , Paul Fredrickson, Cross-modal interaction using XWeb, Proceedings of the 13th annual ACM symposium on User interface software and technology, p.191-200, November 06-08, 2000, San Diego, California, United States [doi>10.1145/354401.354764]
• 54: OnStar. http://www.onstar.com/
• 55: Leysia Palen , Paul Dourish, Unpacking "privacy" for a networked world, Proceedings of the SIGCHI conference on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/642611.642635]
• 56: Jason Pascoe, The stick-e note architecture: extending the interface beyond the user, Proceedings of the 2nd international conference on Intelligent user interfaces, p.261-264, January 06-09, 1997, Orlando, Florida, United States [doi>10.1145/238218.238344]
• 57: Dean Povey, Optimistic security: a new access control paradigm, Proceedings of the 1999 workshop on New security paradigms, p.40-45, September 22-24, 1999, Caledon Hills, Ontario, Canada [doi>10.1145/335169.335188]
• 58: Nissanka B. Priyantha , Anit Chakraborty , Hari Balakrishnan, The Cricket location-support system, Proceedings of the 6th annual international conference on Mobile computing and networking, p.32-43, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345917]
• 59: Rhodes, B. and T. Starner. The Remembrance Agent: A Continuously Running Automated Information Retrieval System. In Proceedings of The First International Conference on The Practical Application of Intelligent Agents and Multi Agent Technology (PAAM '96). London, UK. pp. 487--495 1996.
• 60: Manuel Román , Christopher Hess , Renato Cerqueira , Anand Ranganathan , Roy H. Campbell , Klara Nahrstedt, A Middleware Infrastructure for Active Spaces, IEEE Pervasive Computing, v.1 n.4, p.74-83, October 2002 [doi>10.1109/MPRV.2002.1158281]
• 61: Schilit, B.N., A Context-Aware System Architecture for Mobile Distributed Computing, Unpublished PhD, Columbia University, 1995. http://seattleweb.intel-research.net/people/schilit/schilit-thesis.pdf
• 62: Schilit, B.N., N.I. Adams, and R. Want. Context-Aware Computing Applications. In Proceedings of Workshop on Mobile Computing Systems and Applications. Santa Cruz, CA: IEEE Computer Society, December 1994 1994.
• 63: Bill N. Schilit , Anthony LaMarca , Gaetano Borriello , William G. Griswold , David McDonald , Edward Lazowska , Anand Balachandran , Jason Hong , Vaughn Iverson, Challenge: ubiquitous location-aware computing and the "place lab" initiative, Proceedings of the 1st ACM international workshop on Wireless mobile applications and services on WLAN hotspots, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941326.941331]
• 64: Sloane, L., Orwellian Dream Come True: A Badge That Pinpoints You, New York Times pp. 14, 1992.
• 65: Mike Spreitzer , Marvin Theimer, Providing location information in a ubiquitous computing environment (panel session), Proceedings of the fourteenth ACM symposium on Operating systems principles, p.270-283, December 05-08, 1993, Asheville, North Carolina, United States
• 66: Latanya Sweeney, k-anonymity: a model for protecting privacy, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.10 n.5, p.557-570, October 2002 [doi>10.1142/S0218488502001648]
• 67: Talbott, S., The Trouble with Ubiquitous Technology Pushers, or: Why We'd Be Better Off without the MIT Media Lab. 2000. http://www.oreilly.com/people/staff/stevet/netfuture/2000/Jan0600_100.html
• 68: Roy Want , Andy Hopper , Veronica Falcão , Jonathan Gibbons, The active badge location system, ACM Transactions on Information Systems (TOIS), v.10 n.1, p.91-102, Jan. 1992 [doi>10.1145/128756.128759]
• 69: M. Weiser , R. Gold , J. S. Brown, The origins of ubiquitous computing research at PARC in the late 1980s, IBM Systems Journal, v.38 n.4, p.693-696, Dec. 1999
• 70: Westin, A.F., Privacy and Freedom. New York NY: Atheneum, 1967.
• 71: Whalen, J., You're Not Paranoid: They Really Are Watching You, Wired Magazine, vol. 3(3): pp. 95--85, 1995.

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.2 Design Tools and Techniques
          Subjects: Software libraries

Additional Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
        D.2.11 Software Architectures
            Subjects: Domain-specific architectures

  H. Information Systems
  H.1 MODELS AND PRINCIPLES
      H.1.2 User/Machine Systems
          Subjects: Human factors
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)
          Subjects: User-centered design

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

General Terms:
Design, Human Factors, Security

Keywords:
confab, location, privacy, toolkit, ubiquitous computing