IoT Data Use Policy Control for Privacy-Preserving Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Internet-of-Things systems lack effective control over how data is used, leading to potential data abuse and privacy issues despite access control policies.
Innovation Solution
Implementing a data use control method that includes setting use control policies for target resources, which encompass data use range, purpose, integrity, times, anonymity, aggregation, isolation, and event-based controls, to manage how data is utilized.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control policies are used to control data access, then data access security is improved, but data use control is insufficient leading to potential data abuse
Solution Approach 1:
The patent segments data control into two distinct layers: access control (who can access data) and use control (how data can be used). The use control policy is separated from access control policy, with specific attributes including data use range, data use purpose, data integrity, data use times, data use time, data validity period, data anonymity, data aggregation, and data isolation. This segmentation allows independent control of data usage behaviors without affecting access security mechanisms.
Solution Approach 2:
The system performs preliminary action by establishing use control policies before data access occurs. The use control policy is configured in advance with specific constraints on data usage, and the data use control functional module automatically enforces these pre-defined policies during data operations, preventing data abuse before it happens rather than reacting after access is granted.
2Reliability
If comprehensive use control policies are implemented, then data abuse is prevented, but system complexity increases
Solution Approach 1:
The patent introduces a data use control functional module as an intermediary between the data subject and the data use request. This module receives data use requests, automatically retrieves and evaluates the corresponding use control policies, and enforces the appropriate control measures. By automating the intermediary function, the system manages complex multi-dimensional control policies without proportionally increasing operational complexity.
Solution Approach 2:
The use control policy structure is designed as a universal framework that can handle multiple types of data control requirements through a single unified policy mechanism. The policy includes diverse attributes (use range, purpose, integrity, times, time, validity period, anonymity, aggregation, isolation) that can be configured together or separately to address different data protection needs, making the system versatile without requiring separate mechanisms for each control type.
3Reliability
If data use control is enforced, then data privacy is protected, but data utilization efficiency decreases
Solution Approach 1:
The use control policy is designed to be dynamic rather than static, allowing different control measures to be applied based on the specific data use scenario. The data use control functional module dynamically retrieves and applies appropriate policy attributes (such as allowing aggregation for analytics while preventing access to individual records, or permitting use within specified time ranges) to balance privacy protection with data utilization needs, rather than applying uniform restrictive controls to all data access.
Data Source
AI summary
A data use control method comprises: (S12) receiving a data use request which comprises a target resource to be used; (S14) acquiring a use control policy of the target resource; and (S16) using the target resource according to the use control policy of the target resource. Further, a data use control system (10), an electronic device (20) and a storage medium (30) are also disclosed.