Privacy Architectures: Reasoning About Data Minimisation and Integrity

Thibaud Antignac (1, 2) , Daniel Le Métayer (1, 2)

1 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
2 CITI - CITI Centre of Innovation in Telecommunications and Integration of services

Privacy by design will become a legal obligation in the European Community if the Data Protection Regulation eventually gets adopted. However, taking into account privacy requirements in the design of a system is a challenging task. We propose an approach based on the specification of privacy architectures and focus on a key aspect of privacy, data minimisation, and its tension with integrity requirements. We illustrate our formal framework through a smart metering case study.

Mots clés: privacy; formal model; architecture

Domaines: Cryptographie et sécurité [cs.CR]

Thibaud Antignac, Daniel Le Métayer. Privacy Architectures: Reasoning About Data Minimisation and Integrity. STM - 10th International Workshop on Security and Trust Management, Sep 2014, Wroclaw, France. ⟨hal-01054758⟩