Transcript LBS - Ortungstechnik & Anwendungen

Economic Location-Based Services,
Privacy and the Relationship to
Identity
22 – Jan - 2005
Lothar Fritsch
[email protected]
Lehrstuhl für M-Commerce
& Mehrseitige Sicherheit
Johann Wolfgang Goethe-Universität
Frankfurt am Main
LBS Business Scenarios
3
Privacy threats posed by LBS
1.
2.
3.
4.
A subject might find himself or herself in the
situation to justify the whereabouts stored in
someone else’s systems. This is an essential issue
concerning control over one’s personal data (just
like address trade, or consumer profiling).
An anonymous subject’s identity can be learned by
observing its frequently-used locations (where one
stays every night is one’s home).
A subject’s context can be guessed by observing
location combined with geographic metadata (e.g.
about office location, business district, sport
locations, red light area).
The proximity to other subjects can reveal
personal relationships.
4
Dimension of ID
Gary T. Marx proposes seven types of ID
relevant information, or „attributes“, as
Hansen/Pfitzmann call ID information.
• Legal Name
• Location / reachability
• Publicly intermediated
pseudonyms
• Secret pseudonyms
• Appearance and
Behaviour patterns
• Social categorization
• Possession of
knowledge
5
Problem in ID attributes: Mobility
ID follwoing the Hansen/Pfitzmann
Definition:
Identifiability is the possibility of being
individualized within a set of subjects,
the identifiability set. (…) An identity is
any subset of attributes of an individual
which uniquely characterizes this
individual within any set of individuals.
So usually there is no such thing as “the
identity”, but several of them.
6
Problem in ID attributes: Mobility
ID_Lothar=
(Male,190cm,beard,drinks_beer,Is_In_Rie
zlern)
But I‘m not always in Riezlern. What
happens to my ID when I‘m mobile?
7
Problem in ID attributes: Mobility
Do we need the introduction of a
„freshness“ timestamp for volatile ID
attributes?
This would lead to attributes of longtime value, and attributes of temporal
value.
8
LBS & attributes
LBS obviously need location information.
According to Marx, rechability is an
important attribute, too.
Beyond these two attributes, IDs for LBS
should have as little information as
possible.
9
Suggestion for LBS IDM
LBS with IDM will need machanisms to:
1. Conceal attributes not needed
2. Provide location and a few attributes
3. Create rechability with anonymity
Solutions:
1. Should be done with good pseudonymity
2. Can be done with selective IDM
3. Should be done with anonymous channels
used for communications
10
Discussion
Please ask, discuss, critizise, send
references :-)
11