Trust Mechanism for Enforcing Compliance to Secondary Data Use Contracts

Abstract

In many research and business domains, there are efforts to develop systems that aggregate user data gathered by various data sources. This approach involves secondary sharing of user data and potentially benefits the user in terms of improved personalization and better experience. However, concerns regarding privacy arise when sharing user data with unknown third parties. These concerns can be alleviated at two stages: i) ensuring selective control of the applications to share user data with, and ii) monitoring and penalizing errant data consumers who violate the terms of their contractual agreement and potentially abuse user data. This paper addresses the second stage of data use contract enforcement.We propose a trust management mechanism for monitoring data consumers' compliance to the contractual agreements for which data was shared with them. The trust mechanism is based on user complaints about suspected privacy violations and is able to identify the data consumers who are responsible. The framework penalizes the data consumer found guilty of violating its data use agreement by decreasing its trust value. This makes the data consumer less likely to be selected to receive user data, and limits its participation in the user data marketplace, forcing it to pay a higher price for purchase of user data.

It is not (only) about privacy: How multi-party computation redefines control, trust, and risk in data sharing

“…Such mechanisms can help inform firms about the reputation of prospective data users before deciding to participate in data sharing. Finally, Noorian et al (2014) proposed a data use agreement that clearly states the purpose of data usage, including the penalty that will be enforced in the event of a violation.…”

Designing the Sensing as a Service Ecosystem for the Internet of Things

“…A brand-new milling machine is created in order to gather and process data from a single data owner. It is not allowed to combine personal data from different individuals within a single machine mill [12]. Data Mill either could be located in the cloud or within the local device within the smart home (e.g., as part of Amazon Echo or Google Home) [13].…”