chowniot: Enhancing IoT privacy by automated handling of ownership change
Access rights
openAccess
acceptedVersion
URL
Journal Title
Journal ISSN
Volume Title
A4 Artikkeli konferenssijulkaisussa
This publication is imported from Aalto University research portal.
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
Date
2019-01-01
Department
Major/Subject
Mcode
Degree programme
Language
en
Pages
17
Series
Privacy and Identity Management. Fairness, Accountability, and Transparency in the Age of Big Data - 13th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School, Revised Selected Papers, pp. 205-221, IFIP Advances in Information and Communication Technology ; Volume 547
Abstract
Considering the increasing deployment of smart home IoT devices, their ownership is likely to change during their life-cycle. IoT devices, especially those used in smart home environments, contain privacy-sensitive user data, and any ownership change of such devices can result in privacy leaks. The problem arises when users are either not aware of the need to reset/reformat the device to remove any personal data, or not trained in doing it correctly as it can be unclear what data is kept where. In addition, if the ownership change is due to theft or loss, then there is no opportunity to reset. Although there has been a lot of research on security and privacy of IoT and smart home devices, to the best of our knowledge, there is no prior work specifically on automatically securing ownership changes. We present a system called for securely handling ownership change of IoT devices. combines authentication (of both users and their smartphone), profile management, data protection by encryption, and automatic inference of ownership change. For the latter, we use a simple technique that leverages the context of a device. Finally, as a proof of concept, we develop a prototype that implements inferring ownership change from changes in the WiFi SSID. The performance evaluation of the prototype shows that has minimal overhead and is compatible with the dominant IoT boards on the market.Description
Keywords
IoT, Ownership, Privacy, Smart home
Other note
Citation
Khan, M S N, Marchal, S, Buchegger, S & Asokan, N 2019, chowniot : Enhancing IoT privacy by automated handling of ownership change . in D Slamanig, S Krenn, S Fischer-Hübner, J Pierson & E Kosta (eds), Privacy and Identity Management. Fairness, Accountability, and Transparency in the Age of Big Data - 13th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School, Revised Selected Papers . IFIP Advances in Information and Communication Technology, vol. 547, Springer, pp. 205-221, International IFIP Summer School on Privacy and Identity Management, Vienna, Austria, 20/08/2018 . https://doi.org/10.1007/978-3-030-16744-8_14