Projects per year
Abstract
Personal data is an attractive source of insights for a diverse field of research and business. While our data is highly valuable, it is often privacy-sensitive. Thus, regulations like the GDPR restrict what data can be legally published, and what a buyer may do with this sensitive data. While personal data must be protected, we can still sell some insights gathered from our data that do not hurt our privacy. A data marketplace is a platform that helps users to sell their data while assisting buyers in discovering relevant datasets. The major challenge such a marketplace faces is balancing between offering valuable insights into data while preserving privacy requirements. Private data marketplaces try to solve this challenge by offering privacy-preserving computations on personal data. Such computations allow for calculating statistics or training machine learning models on personal data without accessing the data in plain. However, the user selling the data cannot restrict who can buy or what type of computation the data is allowed. We close the latter gap by proposing a flexible access control architecture for private data marketplaces, which can be applied to existing data markets. Our architecture enables data sellers to define detailed policies restricting who can buy their data. Furthermore, a seller can control what computation a specific buyer can purchase on the data, and make constraints on its parameters to mitigate privacy breaches. The data market's computation system then enforces the policies before initiating a computation. To demonstrate the feasibility of our approach, we provide an implementation for the KRAKEN marketplace, a distributed data market using MPC. We show that our approach is practical since it introduces a negligible performance overhead and is secure against several adversaries.
Original language | English |
---|---|
Title of host publication | Proceedings of the 17th International Conference on Availability, Reliability and Security, ARES 2022 |
Subtitle of host publication | ARES 2022 |
Place of Publication | New York, NY, USA |
Publisher | Association of Computing Machinery |
ISBN (Electronic) | 9781450396707 |
DOIs | |
Publication status | Published - 23 Aug 2022 |
Event | 17th International Conference on Availability, Reliability and Security: ARES Workshop on Security, Privacy, and Identity Management in the Cloud - Vienna, Austria Duration: 23 Aug 2022 → 26 Aug 2022 Conference number: 4 https://www.ares-conference.eu https://www.ares-conference.eu/ |
Publication series
Name | ACM International Conference Proceeding Series |
---|
Workshop
Workshop | 17th International Conference on Availability, Reliability and Security |
---|---|
Abbreviated title | SECPID 2022 |
Country/Territory | Austria |
City | Vienna |
Period | 23/08/22 → 26/08/22 |
Internet address |
Keywords
- Access Control
- Data Market
- Privacy-preserving Computation
- Secure Multi-party Computation
- Trust Policies
ASJC Scopus subject areas
- Software
- Human-Computer Interaction
- Computer Vision and Pattern Recognition
- Computer Networks and Communications
Fingerprint
Dive into the research topics of 'YOU SHALL NOT COMPUTE on my Data: Access Policies for Privacy-Preserving Data Marketplaces and an Implementation for a Distributed Market using MPC'. Together they form a unique fingerprint.-
A-SIT - Secure Information Technology Center Austria
Stranacher, K., Dominikus, S., Leitold, H., Marsalek, A., Teufl, P., Bauer, W., Aigner, M. J., Rössler, T., Neuherz, E., Dietrich, K., Zefferer, T., Mangard, S., Payer, U., Orthacker, C., Lipp, P., Reiter, A., Knall, T., Bratko, H., Bonato, M., Suzic, B., Zwattendorfer, B., Kreuzhuber, S., Oswald, M. E., Tauber, A., Posch, R., Bratko, D., Feichtner, J., Ivkovic, M., Reimair, F., Wolkerstorfer, J. & Scheibelhofer, K.
21/05/99 → 31/12/24
Project: Research area
-
EU - mGov4EU - Mobile Cross-Border Government Services for Europe
1/01/21 → 31/12/23
Project: Research project
-
EU - KRAKEN - Brokerage and market platform for personal data
1/12/19 → 30/11/22
Project: Research project
Activities
- 1 Talk at conference or symposium
-
YOU SHALL NOT COMPUTE on my Data: Access Policies for Privacy-Preserving Data Marketplaces and an Implementation for a Distributed Market using MPC
Stefan Josef More (Speaker) & Lukas Alber (Contributor)
23 Aug 2022Activity: Talk or presentation › Talk at conference or symposium › Science to science