Privacy engineering tietosuojavataava2_lakikoulutus_oliver_14feb2014_public
PROTECTION GOALS FOR PRIVACY ENGINEERING · 2015-05-29 · PROTECTION GOALS FOR PRIVACY ENGINEERING...
35
www.datenschutzzentrum.de PROTECTION GOALS FOR PRIVACY ENGINEERING Marit Hansen, Meiko Jensen, and Martin Rost International Workshop on Privacy Engineering May 21, 2015 Protection Goals for Privacy Engineering
Transcript of PROTECTION GOALS FOR PRIVACY ENGINEERING · 2015-05-29 · PROTECTION GOALS FOR PRIVACY ENGINEERING...
www.datenschutzzentrum.de
PROTECTION GOALS FOR PRIVACY ENGINEERING
Marit Hansen, Meiko Jensen, and Martin Rost
International Workshop on Privacy Engineering
May 21, 2015 Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Outline
Protection Goals for Privacy Engineering
• Security Protection Goals
• Privacy Protection Goals
• Three Axes
• Conclusion
www.datenschutzzentrum.de
Security Protection Goals
Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Confidentiality
•
Protection Goals for Privacy Engineering
“The protection goal of
Confidentiality
is defined as the property that
(privacy-relevant) data
and services that process such data
cannot be accessed
by unauthorized entities.”
www.datenschutzzentrum.de
Confidentiality
•
Protection Goals for Privacy Engineering
• Secrecy
• Non-Disclosure
• Access Restrictions
• Security Clearances
• Data Minimization
• Steganography
• Unobservability
…in other words:
www.datenschutzzentrum.de
Confidentiality
•
Protection Goals for Privacy Engineering
• Data Encryption
in transit (TLS, HTTPS, SSH, …)
at rest (PGP, S/MIME, TrueCrypt, …)
…
• Data Segregation
Secret Sharing, Secure Multiparty Computations
Onion Routing
• Access Control Enforcement
Implementation Techniques:
www.datenschutzzentrum.de
Integrity
Protection Goals for Privacy Engineering
“The protection goal of
Integrity
is defined as the property that
(privacy-relevant) data
and services that process such data
cannot be modified in an unauthorized
or undetected manner.”
www.datenschutzzentrum.de
Integrity
Protection Goals for Privacy Engineering
• Authenticity
• Detection of Data Changes
• Non-Repudiation
• Reliability
…in other words:
www.datenschutzzentrum.de
Integrity
Protection Goals for Privacy Engineering
• Digital Signatures
RSA, ElGamal
Message Authentication Codes
…
• Hash Values
• Access Control Enforcement
• Watchdogs / Canaries
• Two-Man Rules
Implementation Techniques:
www.datenschutzzentrum.de
Availability
Protection Goals for Privacy Engineering
“The protection goal of
Availability
is defined as the property that
access to (privacy-relevant) data
and to services that process such data
is always granted
in a comprehensible, processable, timely manner.”
www.datenschutzzentrum.de
Availability
Protection Goals for Privacy Engineering
• Redundancy
• Monitoring of Availability
• Responsiveness
• Accessibility
• Uptime
…in other words:
www.datenschutzzentrum.de
Availability
Protection Goals for Privacy Engineering
• Backups
• Load Balancers
• Failovers
• Redundant Components
• Avoidance of Single-Points-of-Failure
• Watchdogs / Canaries
Implementation Techniques:
www.datenschutzzentrum.de
Privacy Protection Goals
Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Unlinkability
“The protection goal of
Unlinkability
is defined as the property that
privacy-relevant data cannot be linked
across domains that are constituted by
a common purpose and context.”
Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Unlinkability
Protection Goals for Privacy Engineering
• Data Minimization
• Necessity / Need-to-Know
• Purpose Binding
• Separation of Power
• Unobservability
• Undetectability
…in other words:
www.datenschutzzentrum.de
Unlinkability
Protection Goals for Privacy Engineering
• Data Avoidance / Reduction
• Access Control Enforcement
• Generalization
Anonymization/Pseudonymization
Abstraction
Derivation
• Separation / Isolation
• Avoidance of Identifiers
Implementation Techniques:
www.datenschutzzentrum.de
Unlinkability
Protection Goals for Privacy Engineering
Think of it as …
www.datenschutzzentrum.de
Transparency
Protection Goals for Privacy Engineering
“The protection goal of
Transparency
is defined as the property that
all privacy-relevant data processing
−including the legal, technical,
and organizational setting−
can be understood and reconstructed at any time.”
www.datenschutzzentrum.de
Transparency
Protection Goals for Privacy Engineering
• Openness
• Accountability
• Documentation
• Reproducibility
• Notice (and Choice)
• Auditability
• Full-Disclosure
…in other words:
www.datenschutzzentrum.de
Transparency
Protection Goals for Privacy Engineering
• Logging and Reporting
• User Notifications
• Documentation
• Status Dashboards
• Privacy Policies
• Transparency Services for Personal Data
• Data Breach Notifications
Implementation Techniques:
www.datenschutzzentrum.de
Transparency
Protection Goals for Privacy Engineering
Think of it as …
www.datenschutzzentrum.de
Intervenability
Protection Goals for Privacy Engineering
“The protection goal of
Intervenability
is defined as the property that
intervention is possible concerning all
ongoing or planned privacy-relevant
data processing.”
www.datenschutzzentrum.de
Intervenability
Protection Goals for Privacy Engineering
• Self-determination
• User Controls
• Rectification or Erasure of Data
• (Notice and) Choice
• Consent Withdrawal
• Claim Lodging / Dispute Raising
• Process Interruption
…in other words:
www.datenschutzzentrum.de
Intervenability
Protection Goals for Privacy Engineering
• Configuration Menu
• Help Desks
• Stop-Button for Processes
• Break-Glass / Alert Procedures
• System Snapshots
• Manual Override of Automated Decisions
• External Supervisory Authorities (DPAs)
Implementation Techniques:
www.datenschutzzentrum.de
Intervenability
Protection Goals for Privacy Engineering
Think of it as …
www.datenschutzzentrum.de
Three Axes
Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Confidentiality <-> Availability
Protection Goals for Privacy Engineering
Confidentiality
No access to data
No access to services
Authorized entities only
Availability
Full access to data
Full access to services
Everybody
www.datenschutzzentrum.de
Integrity <-> Intervenability
Protection Goals for Privacy Engineering
Integrity
No changes to data
No changes to process
Defined by processor
Intervenability
All types of changes
Full process flexibility
Defined by individual
www.datenschutzzentrum.de
Unlinkability <-> Transparency
Protection Goals for Privacy Engineering
Unlinkability
No linkable data
No disclosure of process
Need-to-Know
Transparency
Full linkability of data
Full disclosure of process
Want-to-Know
www.datenschutzzentrum.de
The Six-Pointed Star
Protection Goals for Privacy Engineering
Integrity
Confidentiality Unlinkability
Intervenability
Transparency Availability
www.datenschutzzentrum.de
The Six-Pointed Star
Protection Goals for Privacy Engineering
Integrity
Confidentiality Unlinkability
Intervenability
Transparency Availability
www.datenschutzzentrum.de
Conclusion
Protection Goals for Privacy Engineering
www.datenschutzzentrum.de
Conclusion
Protection Goals for Privacy Engineering
• Protection Goals have proven very useful:
for Implementers
for Lawyers
for Data Protection Authorities
for Users
• Privacy Protection Goals:
Unlinkability
Transparency
Intervenability
I
C U
Iv
T A
www.datenschutzzentrum.de
References
Protection Goals for Privacy Engineering
Shaping the Future
of Electronic Identity
partly funded by
EU FP7,
GA n° 318424
www.futureid.eu
Forum Privatheit
und selbstbestimmtes Leben
in der Digitalen Welt
(Privacy Forum Germany)
partly funded by the
German Federal Ministry
of Education and Research
www.forum-privatheit.de
www.datenschutzzentrum.de
Protection Goals for Privacy Engineering
Thank You!
Unabhängiges Landeszentrum für
Datenschutz Schleswig-Holstein
Phone: 0431 988 – 1200
http://www.datenschutzzentrum.de/
Protection Goals
for Privacy Engineering
Marit Hansen,
Meiko Jensen,
and Martin Rost
I
C U
Iv
T A
![27 Mining Privacy Goals from Privacy Policies using ...jbhatia/papers/jbhatia_TOSEM2016.pdf · other RE tasks [Kof 2004]. These include automatically extracting requirements and goals](https://static.fdocuments.us/doc/165x107/5ec075ecebd7ed491c262824/27-mining-privacy-goals-from-privacy-policies-using-jbhatiapapersjbhatia.jpg)
