TY - GEN
T1 - IoT Expunge
T2 - 10th ACM Conference on Data and Application Security and Privacy, CODASPY 2020
AU - Panwar, Nisha
AU - Sharma, Shantanu
AU - Gupta, Peeyush
AU - Ghosh, Dhrubajyoti
AU - Mehrotra, Sharad
AU - Venkatasubramanian, Nalini
N1 - Publisher Copyright:
© 2020 ACM.
PY - 2020/3/16
Y1 - 2020/3/16
N2 - The growing deployment of Internet of Things (IoT) systems aims to ease the daily life of end-users by providing several value-added services. However, IoT systems may capture and store sensitive, personal data about individuals in the cloud, thereby jeopardizing user-privacy. Emerging legislation, such as California's CalOPPA and GDPR in Europe, support strong privacy laws to protect an individual's data in the cloud. One such law relates to strict enforcement of data retention policies. This paper proposes a framework, entitled IoT Expunge that allows sensor data providers to store the data in cloud platforms that will ensure enforcement of retention policies. Additionally, the cloud provider produces verifiable proofs of its adherence to the retention policies. Experimental results on a real-world smart building testbed show that IoT Expunge imposes minimal overheads to the user to verify the data against data retention policies.
AB - The growing deployment of Internet of Things (IoT) systems aims to ease the daily life of end-users by providing several value-added services. However, IoT systems may capture and store sensitive, personal data about individuals in the cloud, thereby jeopardizing user-privacy. Emerging legislation, such as California's CalOPPA and GDPR in Europe, support strong privacy laws to protect an individual's data in the cloud. One such law relates to strict enforcement of data retention policies. This paper proposes a framework, entitled IoT Expunge that allows sensor data providers to store the data in cloud platforms that will ensure enforcement of retention policies. Additionally, the cloud provider produces verifiable proofs of its adherence to the retention policies. Experimental results on a real-world smart building testbed show that IoT Expunge imposes minimal overheads to the user to verify the data against data retention policies.
KW - data deletion
KW - internet of things
KW - smart building
KW - user privacy
KW - verification
UR - http://www.scopus.com/inward/record.url?scp=85083385073&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85083385073&partnerID=8YFLogxK
U2 - 10.1145/3374664.3375737
DO - 10.1145/3374664.3375737
M3 - Conference contribution
AN - SCOPUS:85083385073
T3 - CODASPY 2020 - Proceedings of the 10th ACM Conference on Data and Application Security and Privacy
SP - 283
EP - 294
BT - CODASPY 2020 - Proceedings of the 10th ACM Conference on Data and Application Security and Privacy
PB - Association for Computing Machinery, Inc
Y2 - 16 March 2020 through 18 March 2020
ER -