δ-Risk: Toward Context-aware Multi-objective Privacy Management in Connected Environments

Karam Bou-Chaaya (1) , Richard Chbeir (1) , Mansour Naser Alraja (2) , Philippe Arnould (1) , Charith Perera (3) , Mahmoud Barhamgi (4, 5) , Djamal Benslimane (4, 5)

1 LIUPPA - Laboratoire Informatique de l'Université de Pau et des Pays de l'Adour
2 Dhofar University
3 School of Computer Sciences & Informatics [Cardiff]
4 LIRIS - Laboratoire d'InfoRmatique en Image et Systèmes d'information
5 SOC - Service Oriented Computing

In today's highly connected cyber-physical environments, users are becoming more and more concerned about their privacy and ask for more involvement in the control of their data. However, achieving effective involvement of users requires improving their privacy decision-making. This can be achieved by: (i) raising their awareness regarding the direct and indirect privacy risks they accept to take when sharing data with consumers; (ii) helping them in optimizing their privacy protection decisions to meet their privacy requirements while maximizing data utility. In this article, we address the second goal by proposing a user-centric multiobjective approach for context-aware privacy management in connected environments, denoted δ-Risk. Our approach features a new privacy risk quantification model to dynamically calculate and select the best protection strategies for the user based on her preferences and contexts. Computed strategies are optimal in that they seek to closely satisfy user requirements and preferences while maximizing data utility and minimizing the cost of protection. We implemented our proposed approach and evaluated its performance and effectiveness in various scenarios. The results show that δ-Risk delivers scalability and low-complexity in time and space. Besides, it handles privacy reasoning in real-time, making it able to support the user in various contexts, including ephemeral ones. It also provides the user with at least one best strategy per context.

Mots clés: User-centric Privacy; Privacy Risk Quantification; Privacy by Design; Context-aware Computing; Semantic Reasoning; Internet of Things

Domaines: Intelligence artificielle [cs.AI]; Interface homme-machine [cs.HC]; Cryptographie et sécurité [cs.CR]; Recherche d'information [cs.IR]; Automatique

Karam Bou-Chaaya, Richard Chbeir, Mansour Naser Alraja, Philippe Arnould, Charith Perera, et al.. δ-Risk: Toward Context-aware Multi-objective Privacy Management in Connected Environments. ACM Transactions on Internet Technology, 2021, 21 (2), pp.51. ⟨10.1145/3418499⟩. ⟨hal-03259581⟩