IoT Data Anonymization Policies for Granular Privacy Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing M2M/IoT service layer architectures lack the capability to anonymize user data at a granular level, failing to provide fine-grained control over access to personally identifiable information (PII) and user data, which is essential for protecting user privacy when sharing data with third parties.
Innovation Solution
Implementing a privacy policy service and data anonymization service within the M2M/IoT service layer to generate and apply anonymization policies based on legal obligations, subscriber privacy preferences, and data consumer authorization levels, ensuring that raw data is anonymized before sharing, and providing a mechanism to link user profiles with devices and applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user data is shared with third party consumers, then data utility and service capability are improved, but user privacy protection deteriorates
Solution Approach 1:
The patent segments user data into personally identifiable information (PII) and anonymized data portions. The PII is separated and protected separately from the anonymized data that is shared with third parties, allowing data utility while preventing privacy breaches through structural data division
Solution Approach 2:
The patent introduces an intermediary anonymization service between the user data and third party consumers. This service acts as a mediator that transforms raw user data into anonymized form before sharing, protecting user privacy while enabling data utilization by third parties
2Object-affected harmful factors
If fine-grained control over PII access is implemented, then user privacy protection is improved, but system complexity increases
Solution Approach 1:
The patent applies preliminary anonymization processing to user data before it enters the sharing system. By pre-anonymizing data and separating PII beforehand, the system establishes fine-grained access control mechanisms in advance, reducing the complexity of real-time access control while maintaining strong privacy protection
Solution Approach 2:
The patent adds a new dimension to data management by introducing anonymization level as a separate layer. Instead of complex access controls on the same data layer, the system creates an additional anonymization dimension that simplifies access control while providing fine-grained privacy protection
3Object-affected harmful factors
If data anonymization is performed before sharing, then user privacy is protected, but data value and utility are reduced
Solution Approach 1:
The patent applies local quality by selectively anonymizing only the PII portions of data while preserving the utility-rich portions. Different data elements receive different levels of processing - PII is fully anonymized while other data maintains its original quality and utility for third party consumption
Data Source
AI summary
An IoT/M2M service layer may be provided with the capability to protect user privacy. This functionality may allow the IoT/M2M service layer to anonymize user data, particularly when user data is shared with third party consumers. A privacy policy service may enable the IoT service layer system to generate anonymization (e.g., privacy) policies based on inputs such as legal obligations, subscriber privacy preferences, and an authorization level of the data consumer. Data anonymization policies may be output from the privacy policy service and may be sent to a data anonymization service, where raw data may be anonymized based on the one or more data anonymization policies. The output from the data anonymization service function may be a privatized (e.g., anonymized) version of data that may prevent the data consumer from discovering one or more identifying characteristics of a user.