100 likes | 225 Views
Economic Location-Based Services, Privacy and the Relationship to Identity. 22 – Jan - 2005. Lothar Fritsch Lothar.Fritsch@M-Lehrstuhl.de Lehrstuhl für M-Commerce & Mehrseitige Sicherheit Johann Wolfgang Goethe-Universität Frankfurt am Main. LBS Business Scenarios.
E N D
Economic Location-Based Services, Privacy and the Relationship to Identity 22 – Jan - 2005 Lothar Fritsch Lothar.Fritsch@M-Lehrstuhl.de Lehrstuhl für M-Commerce& Mehrseitige Sicherheit Johann Wolfgang Goethe-Universität Frankfurt am Main
Privacy threats posed by LBS • A subject might find himself or herself in the situation to justify the whereabouts stored in someone else’s systems. This is an essential issue concerning control over one’s personal data (just like address trade, or consumer profiling). • An anonymous subject’s identity can be learned by observing its frequently-used locations (where one stays every night is one’s home). • A subject’s context can be guessed by observing location combined with geographic metadata (e.g. about office location, business district, sport locations, red light area). • The proximity to other subjects can reveal personal relationships.
Dimension of ID • Gary T. Marx proposes seven types of ID relevant information, or „attributes“, as Hansen/Pfitzmann call ID information. • Appearance and Behaviour patterns • Social categorization • Possession of knowledge • Legal Name • Location / reachability • Publicly intermediated pseudonyms • Secret pseudonyms
Problem in ID attributes: Mobility • ID follwoing the Hansen/Pfitzmann Definition: • Identifiability is the possibility of being individualized within a set of subjects, the identifiability set. (…) An identity is any subset of attributes of an individual which uniquely characterizes this individual within any set of individuals. So usually there is no such thing as “the identity”, but several of them.
Problem in ID attributes: Mobility • ID_Lothar= • (Male,190cm,beard,drinks_beer,Is_In_Riezlern) • But I‘m not always in Riezlern. What happens to my ID when I‘m mobile?
Problem in ID attributes: Mobility • Do we need the introduction of a „freshness“ timestamp for volatile ID attributes? • This would lead to attributes of long-time value, and attributes of temporal value.
LBS & attributes • LBS obviously need location information. • According to Marx, rechability is an important attribute, too. • Beyond these two attributes, IDs for LBS should have as little information as possible.
Suggestion for LBS IDM • LBS with IDM will need machanisms to: • Conceal attributes not needed • Provide location and a few attributes • Create rechability with anonymity • Solutions: • Should be done with good pseudonymity • Can be done with selective IDM • Should be done with anonymous channels used for communications
Discussion • Please ask, discuss, critizise, send references :-)