MUPPET: Mobile Ubiquitous Privacy Protection for Electronic Transactions

Winnie Cheng,Jun Li,Keith Moore,Alan H. Karp
2007-01-01
Abstract:Mobile companions such as smartphones and PDAs are very personal and carry a lot of sensitive data about their owners. With new services aimed at providing more targeted information retrieval through increased interactions with these devices, privacy concerns of individuals must be addressed. Existing solutions give users little control over release of this information. MUPPET is a privacy-aware information brokerage framework that incorporates a number of novel techniques to give users control over the release of their data. First, it introduces Operation-focused Access Control, a purpose-based access control model that supports flexible and fine-grain policies using typed operation labels. Second, our system allows RewardDriven Information Exchange. It provides a protocol for explicit communication of justifications and rewards and tunable privacy policies based on ongoing evaluation of the information exchange. Third, MUPPET includes a Purpose Detection Engine with an intuitive user interface for purpose management and supports explicit as well as implicit purpose activations based on context or authorizations. To validate our design, the MUPPET prototype has been integrated with a coupon personalization application for two different service providers in an experimental retail kiosk setting.
What problem does this paper attempt to address?