Sensor-based IoT Data Privacy Protection

Xiaoyu Ji,Wenjun Zhu,Shilin Xiao,Wenyuan Xu

DOI: https://doi.org/10.1038/s44287-024-00073-2

2024-01-01

Abstract:Sensors are extensively used in the Internet of Things (IoT) applications, enhancing daily convenience but also raising concerns about privacy leakage. To address this, we advocate for protecting data privacy at the moment it is generated by sensors, rather than trying to secure it afterwards.

What problem does this paper attempt to address?

Privacy and Security in the Exploitation of Internet of Things

沈斌,刘渊

DOI: https://doi.org/10.15994/j.1000-0763.2011.06.003

2011-01-01

Abstract:The Internet of things (IoT) is called the third wave of information industry revolution, which will affect and change people's daily life profoundly. In the process of using IoT, it is urgent for us to face and solve the problem of security and privacyprotection. In this paper, we explain the new features of security and privacy protection in the applications of IoT, and reveal thepotential security risks and privacy violation produced by viruses and hackers in the IoT. This article also presents the importantpoints for security and privacy protection of IoT from the technical and legal perspective respectively, and points out principles forharmonious using of IoT. At last, the corresponding countermeasures are also put forward. It is important for our country to establishthe security system and build the green culture for IoT.
Privacy-Preserving Authentication in Wireless IoT: Applications, Approaches, and Challenges

Shujuan Wang,Jian Wang,Zhengtao Yu

DOI: https://doi.org/10.1109/mwc.2017.1800109

IF: 12.777

2018-01-01

IEEE Wireless Communications

Abstract:Wireless IoT is a promising area in which large quantities of data and information are collected, exchanged, and stored constantly. While these data and information are utilized for good purposes in wireless IoT, great risks arise in that attackers are seeking to exploit the merits of this new technology for their own benefits. In such a resource-constrained environment, devices are easily exposed to various attacks. Confidential private information is as valuable as it is vulnerable. It is difficult for end users to trust wireless IoT and to adopt related applications due to the lack of satisfactory privacy-preserving mechanisms, which has become the major obstacle for the adoption and popularization of wireless IoT. In this article, we first introduce the classical application scenarios of wireless IoT, along with related security and privacy attack models. We then present a brief overview of privacy-preserving schemes of wireless IoT. Based on the classification of application scenarios, we further present recent advances in privacy-preserving mechanisms in wireless IoT. Finally, we discuss open issues and future research directions for these application scenarios in wireless IoT.
A Privacy Aware Architecture for IoT Enabled Systems

Ismini Psychoula,Liming Chen,Xuanxia Yao,Huansheng Ning

DOI: https://doi.org/10.1109/SmartWorld-UIC-ATC-SCALCOM-IOP-SCI.2019.00073

2019-01-01

Abstract:The Internet of Things has been used widely for the development of many different types of smart systems. But the constant monitoring of activities and behaviours and the collection along with the use of confidential data have led to increasing concerns about privacy which have indeed become one of the main barriers to technology acceptance and adoption. The development of new personalised technologies increases the use of sensitive data which should be kept hidden from third parties. The current methods are not sufficient and effective to assess and mitigate the significant privacy risks exposed by IoT and to support the design and adoption of privacy-aware smart systems. In this context, this paper proposes an architecture for privacy preservation which enables fine-grained control over data, anonymization and authentication. In particular, we introduce a privacy aware IoT architecture that utilises physical unclonable functions and deep learning to ensure the privacy of the collected IoT data.
Distributed Data Privacy Preservation in IoT Applications.

Jun Du,Chunxiao Jiang,Erol Gelenbe,Lei Xu,Jianhua Li,Yong Ren

DOI: https://doi.org/10.1109/mwc.2017.1800094

IF: 12.777

2018-01-01

IEEE Wireless Communications

Abstract:Recently, the Internet of Things (IoT) has penetrated many aspects of the physical world to realize different applications. Through IoT, these applications generate, exchange, aggregate, and analyze a vast amount of security-critical and privacy- sensitive data, which makes them attractive targets of attacks. Therefore, it is rather necessary for IoT systems to be equipped with the ability to resist security and privacy risks when fulfilling the desired functional requirements and services. To achieve these goals, there are many new challenges for IoT to implement privacy preserving data manipulation. First, data analysts need to process privacy-sensitive data to extract the expected information without privacy disclosure. In addition, many privacy related factors, including privacy valuation and risk assessment, affect sensitive and private data trading between data owners and requesters. Moreover, the data owners' security behavior also plays an important role in privacy protection in IoT applications. Concerning these issues, this article introduces and surveys privacy preserving techniques in the processes of data aggregation, trading, and analysis: the balance between data analysis and privacy preservation from the data analysts' perspective, secure data trading from the perspective of data owners and requesters, and secure private data aggregation from the data owners' perspective.
A Brief Survey on IoT Privacy - Taxonomy, Issues and Future Trends.

Kinza Sarwar,Sira Yongchareon,Jian Yu

DOI: https://doi.org/10.1007/978-3-030-17642-6_18

2018-01-01

Abstract:Internet of Things (IoT) is a paradigm that has the capability to revolutionize on everyday life, in sectors of ranging from our homes, health, transport, industry, entertainment to interaction with government. The comfort and benefits that IoT is providing are undeniable, however, these may come with a huge risk of individual identity and data privacy. Several researches have been conducted to find a better way to eliminate privacy risks and minimize the effect on users’ privacy requirements. In this context, the proposed study consists of four segments, first we analyse the privacy problems evolving with the advancement in IoT paradigm. In the second segment, we present methodology review with analysis and classification of privacy solutions. Then we provide an in-depth analysis of preserving privacy during sensors data transmission. In the last segment, we depict the future trend for end-to-end privacy in IoT.
Big Data Privacy in the Internet of Things Era

Charith Perera,Rajiv Ranjan,Lizhe Wang,Samee U. Khan,Albert Y. Zomaya

DOI: https://doi.org/10.1109/MITP.2015.34

2015-06-08

Abstract:Over the last few years, we have seen a plethora of Internet of Things (IoT) solutions, products and services, making their way into the industry's market-place. All such solution will capture a large amount of data pertaining to the environment, as well as their users. The objective of the IoT is to learn more and to serve better the system users. Some of these solutions may store the data locally on the devices ('things'), and others may store in the Cloud. The real value of collecting data comes through data processing and aggregation in large-scale where new knowledge can be extracted. However, such procedures can also lead to user privacy issues. This article discusses some of the main challenges of privacy in IoT, and opportunities for research and innovation. We also introduce some of the ongoing research efforts that address IoT privacy issues.

Computers and Society,Databases,Networking and Internet Architecture
Survey on IoT Privacy, Data Protection and Security Concerns

Sakshi Rai,Ujawal Rai,Chetan Randhye,Achal Amrutkar,Prof. Manisha More

DOI: https://doi.org/10.22214/ijraset.2023.57413

2023-12-31

International Journal for Research in Applied Science and Engineering Technology

Abstract:Abstract: The proliferation of Internet of Things (IoT) devices has transformed the way we interact with the digital world, offering unprecedented connectivity and convenience. However, this rapid expansion brings forth profound challenges concerning privacy, data protection, and security. This survey paper comprehensively explores the multifaceted landscape of IoT, dissecting its architecture, and delving into the intricate web of concerns surrounding user privacy, data safeguarding, and system security.Beginning with an examination of the IoT architecture, we dissect the interconnected layers, ranging from sensors to cloud platforms, illustrating the intricate pathways of data flow. The survey meticulously unfolds the privacy challenges embedded in the constant data collection, tracking, and profiling mechanisms intrinsic to IoT devices. Drawing on real-world examples, we underscore the tangible consequences of privacy breaches and the potential erosion of user trust.In the realm of data protection, we delve into the complexities of safeguarding data integrity, confidentiality, and availability within the IoT ecosystem. Regulatory frameworks, notably the General Data Protection Regulation (GDPR), are scrutinized for their impact on shaping data protection practices. Concurrently, the paper uncovers common security threats in IoT, emphasizing vulnerabilities in devices and the looming risks associated with unauthorized access and data breaches.Navigating through the regulatory landscape, the survey provides an overview of existing standards and regulations governing IoT. Case studies spotlight instances of privacy breaches, data protection lapses, and security vulnerabilities, offering practical insights into the implications of these incidents. Mitigation strategies, encompassing encryption, authentication, and access control, are explored to address the identified concerns.As the paper concludes, it synthesizes the key findings, emphasizing the urgency of continued efforts to fortify IoT against privacy, data protection, and security challenges. The survey anticipates future trends and challenges, offering a roadmap for researchers, policymakers, and industry stakeholders to collectively forge a secure and privacy-aware IoT landscape.
Understanding factors behind IoT privacy -- A user's perspective on RF sensors

Akash Deep Singh,Brian Wang,Luis Garcia,Xiang Chen,Mani Srivastava

2024-03-04

Abstract:While IoT sensors in physical spaces have provided utility and comfort in our lives, their instrumentation in private and personal spaces has led to growing concerns regarding privacy. The existing notion behind IoT privacy is that the sensors whose data can easily be understood and interpreted by humans (such as cameras) are more privacy-invasive than sensors that are not human-understandable, such as RF (radio-frequency) sensors. However, given recent advancements in machine learning, we can not only make sensitive inferences on RF data but also translate between modalities. Thus, the existing notions of privacy for IoT sensors need to be revisited. In this paper, our goal is to understand what factors affect the privacy notions of a non-expert user (someone who is not well-versed in privacy concepts). To this regard, we conduct an online study of 162 participants from the USA to find out what factors affect the privacy perception of a user regarding an RF-based device or a sensor. Our findings show that a user's perception of privacy not only depends upon the data collected by the sensor but also on the inferences that can be made on that data, familiarity with the device and its form factor as well as the control a user has over the device design and its data policies. When the data collected by the sensor is not human-interpretable, it is the inferences that can be made on the data and not the data itself that users care about when making informed decisions regarding device privacy.

Human-Computer Interaction
IoT Data Privacy Protection Scheme Based on Blockchain

Yue Wu,Liangtu Song,Lei Liu,Qijin Wang

DOI: https://doi.org/10.1088/1755-1315/769/4/042034

2021-01-01

IOP Conference Series Earth and Environmental Science

Abstract:This article introduces the blockchain technology and proposes a blockchain-based IoT sensor data privacy protection scheme from the anonymisation of user identity, the protection of private data and the procedure that allows third parties to use encrypted sensor data. The sensor and the gateway establish a connection after authentication and key negotiation, and the sensor periodically uploads the sampled data and hash-based message authentication code (HMAC) to the gateway. After the gateway verifies the HMAC code of the sensor data, it encrypts the sensor data, constructs a blockchain transaction and submits it to the blockchain node. Blockchain nodes cache transactions and periodically generate blocks to confirm that the transactions are on the chain. After the gateway constructs an authorised transaction and submits it to the blockchain node for confirmation, the designated decentralised application (DApp) obtains the permission and related keys to access the designated sensor managed by the gateway. Finally, the DApp queries the local blockchain node for the specified sensor data and decrypts the results. Experiments have proven through in-depth discussions on sensor synthesis data, sensor/gateway verification, transaction data encryption and transaction signatures that the scheme can be used in IoT systems.
Data Privacy Preservation on the Internet of Things

Jaydip Sen,Subhasis Dasgupta

2023-04-01

Abstract:Recent developments in hardware and information technology have enabled the emergence of billions of connected, intelligent devices around the world exchanging information with minimal human involvement. This paradigm, known as the Internet of Things (IoT) is progressing quickly with an estimated 27 billion devices by 2025. This growth in the number of IoT devices and successful IoT services has generated a tremendous amount of data. However, this humongous volume of data poses growing concerns for user privacy. This introductory chapter has presented a brief survey of some of the existing data privacy-preservation schemes proposed by researchers in the field of the Internet of Things.

Cryptography and Security,Machine Learning
Privacy in the Internet of Things for Smart Healthcare.

Daojing He,Ran Ye,Sammy Chan,Mohsen Guizani,Yanping Xu

DOI: https://doi.org/10.1109/MCOM.2018.1700809

IF: 9.03

2018-01-01

IEEE Communications Magazine

Abstract:With the rapid development of wearable biosensors and wireless communication technologies, various smart healthcare systems are proposed to monitor the health of patients in real time. However, many security problems exist in these systems. For example, a password guessing attack can compromise IoT devices, leading to invasion of health data privacy. After giving an overview of security threats of...
Users' Privacy Concerns in IoT Based Applications

Ismini Psychoula,Deepika Singh,Liming Chen,Feng Chen,Andreas Holzinger,Huansheng Ning

DOI: https://doi.org/10.1109/smartworld.2018.00317

2018-01-01

Abstract:In recent years user privacy has become an important aspect in the development of the Internet of Things (IoT) services due to their privacy invasive nature. However, there has been comparatively little research so far that aims to understanding users' notion of privacy in connection with IoT. In this work, we aim to understand how and if contextual factors affect users' privacy perceptions of IoT environments. To ascertain privacy perceptions, we deployed a public online survey (N=236) and contacted interviews (N=41) to explore factors that could have an influence. Although a lot of the participants identified privacy risks in IoT and rated the collected information items with high privacy ratings, we find that quite a large number of participants would still decide to have the offered IoT service if they find it useful and practical for their daily lives despite the infringement on their privacy. We conclude by highlighting and analyzing the qualitative comments of the participants and suggest possible solutions for the identified issues.
Privacy-preserving raw data collection without a trusted authority for IoT

Yi-Ning Liu,Yan-Ping Wang,Xiao-Fen Wang,Zhe Xia,Jing-Fang Xu

DOI: https://doi.org/10.1016/j.comnet.2018.11.028

IF: 5.493

2019-01-01

Computer Networks

Abstract:With the rapid developments of IoT technologies, a large amount of real-time data is collected and shared, having important impacts on many applications, such as business advertisement and decision-making assistance. However, most users are unwilling to share their personal data directly to any third party for either academic research or commercial analysis because personal data contains private or sensitive information, such as economic status or living habits. Balancing the utility of big data and users’ privacy is a vital issue in academia and industry. In this paper, a privacy-preserving raw data collection scheme for IoT is proposed, in which the participant's data is collected and obfuscated with the other participants’ data within a group in order to mask the individual's privacy. Specifically, individual data is kept in its raw format to enhance its value for the data consumer, while no other users outside of the user herself know the source of the collected data. In addition, no trusted authority (TA) is needed in our proposed scheme, which is more suitable for real-world applications. Moreover, efficiency analysis is performed by simulation, and the result shows that our proposed scheme is practical for IoT systems.
Recent Trends Towards Privacy‐preservation in Internet of Things, Its Challenges and Future Directions

Mahdi Safaei Yaraziz,Ahmad Jalili,Mehdi Gheisari,Yang Liu

DOI: https://doi.org/10.1049/cds2.12138

2023-01-01

IET Circuits Devices & Systems

Abstract:The Internet of Things (IoT) is a self-configuring, intelligent system in which things connect to the Internet and communicate with each other. As “things” are autonomous and rely on a significant amount of autonomy to carry out their individual and collective tasks, it is possible that the autonomous environment of IoT may raise privacy concerns. IoT encounters significant privacy and security challenges, including inaccurate device updates, a lack of efficient privacy solutions, user unawareness, and famed active device monitoring capabilities. In this paper, the authors describe the background of IoT systems and privacy and security measures, (a) approaches to preserving privacy in IoT-based systems, (b) existing privacy solutions, and (c) recommending privacy models for different layers of IoT applications. Based on the results of our study, it is clear that new methods such as Blockchain, Machine Learning, Data Minimization, and Data Encryption can greatly impact privacy issues to ensure security and privacy. Moreover, it makes sense that users can protect their personal information easier if there is less data to collect, store, and share by smart devices. Thus, the use of Data Minimization methods in these networks can be very beneficial for privacy-preserving, which is useful to route researchers to
Big Data Privacy Protection Based on Secure Compressive Sensing

WANG Ping,ZHANG Yushu,HE Xing,ZHONG Sheng

DOI: https://doi.org/10.11959/j.issn.2096-0271.2020002

2020-01-01

Abstract:The current “big bang” of data is mainly driven by interconnection of all things.Various types of IoT sensing devices serving in daily life are constantly capturing personal privacy data.However,these privacy data have become the key targets of network attacks.Data security issues in the resource-constrained IoT applications were analyzed,a novel privacy protection technique based on compressive sensing theory was introduced,which is called secure compressed sensing,and a corresponding big data collection scheme was proposed.As demonstrated by the theoretical and experimental security analysis,there is a conclusive appeal for that secure compressive sensing can be used as a lightweight encryption mechanism which is built into the perception layer to provide first-level security protection for data at almost zero cost.
The New Method of Sensor Data Privacy Protection for IoT

Yue Wu,Liangtu Song,Lei Liu

DOI: https://doi.org/10.1155/2021/3920579

IF: 1.616

2021-01-01

Shock and Vibration

Abstract:This article introduces the new method of sensor data privacy protection method for IoT. Asymmetric encryption is used to verify the identity of the gateway by the sensor. The IoT gateway node verifies the integrity and source of the data, then creates a block, and submits the block chain transaction. In order to avoid tracking the source of the data, a ring signature is used to anonymize the gateway transaction. The proxy re-encryption method realizes the sharing of encrypted data. On the basis of smart contracts, attribute-based data access control allows decentralized applications to finely control data access. Through experiments, the effects of sensor/gateway verification, transaction signatures, and sensor data encryption on performance are discussed. The results show that transaction delays are all controlled within a reasonable range. The system performance achieved by this method is also relatively stable.
A Survey on Internet of Things Security from Data Perspectives

Jianwei Hou,Leilei Qu,Wenchang Shi

DOI: https://doi.org/10.1016/j.comnet.2018.11.026

IF: 5.493

2018-01-01

Computer Networks

Abstract:As the Internet of Things (IoT) sees an increasing use in the society, the security challenge it faces is becoming more and more severe. Data collected and shared in the IoT plays an important role in the significance of the IoT. Observing from a data perspective may be of great help in understanding IoT security. Though a number of surveys on IoT security have been out there, none of them is from such a perspective. To fill the gap, this paper investigates IoT security from data perspectives. Combining the concept of typical IoT architectures with data life cycles, the paper proposes a three-dimensional approach to exploring IoT security, i.e., with the one-stop, multi-stop and end-application dimensions. The one-stop dimension explores IoT security by observing data on an IoT device, the multi-stop dimension by observing data among a group of IoT entities, and the end-application dimension by observing data used in IoT applications. While data may flow from IoT end-point devices through the Internet to a cloud or vice versa, the most demanding IoT-specific issues are in the space from IoT end-point devices to the border of the Internet, therefore the paper focuses on this space. The one-stop dimension discusses IoT security with respect to data that may flow from and to an end-point device. The multi-stop dimension works from the angle of data among a group of IoT entities, concerning secure communication, authentication and access control. The end-application dimension acts from the viewpoint of data usage in IoT applications, covering privacy, forensics, and social or legal challenges of the entire system. The paper makes an in-depth analysis of the latest development in IoT security by observing from data perspectives, summarizing open issues and suggesting promising directions for further research and applications of IoT security.
The Privacy Protection of IoT Data Fusion and Sensing Detection Under Artificial Intelligence Technology

Xinyue Zhang

DOI: https://doi.org/10.1007/s11277-023-10822-5

IF: 2.017

2024-02-17

Wireless Personal Communications

Abstract:One of the most important modern technologies is IoT networks. IoT network is a distributed sensor network composed of multiple sensors with transmission, computing and communication capabilities. It collects the surrounding environment information through the sensors on the node, and collects data in the integrated node to achieve complete and efficient processing and analysis. With the development of intranet technology and sensors, data integration on intranet plays an important role. At the same time, privacy protection and data integration in IoT networks is a contradiction that needs to be reconciled. Data integration is one of the core businesses of the Intranet. The relationship between sensor data privacy and system integration is studied, and a framework for data integration error identification is proposed. However, it is not necessary to know the actual content of sensor data to ensure the privacy of sensor data. The experimental results show that this method achieves effective data integration while protecting the privacy of actual raw data and sensor data integration.

telecommunications
An Overview of Privacy Preserving Schemes for Industrial Internet of Things

Yan Huo,Chun Meng,Ruinian Li,Tao Jing

DOI: https://doi.org/10.23919/JCC.2020.10.001

2020-01-01

China Communications

Abstract:The concept of Internet of Everything is like a revolutionary storm, bringing the whole society closer together. Internet of Things (IoT) has played a vital role in the process. With the rise of the concept of Industry 4.0, intelligent transformation is taking place in the industrial field. As a new concept, an industrial IoT system has also attracted the attention of industry and academia. In an actual industrial scenario, a large number of devices will generate numerous industrial datasets. The computing efficiency of an industrial IoT system is greatly improved with the help of using either cloud computing or edge computing. However, privacy issues may seriously harmed interests of users. In this article, we summarize privacy issues in a cloud- or an edge-based industrial IoT system. The privacy analysis includes data privacy, location privacy, query and identity privacy. In addition, we also review privacy solutions when applying software defined network and blockchain under the above two systems. Next, we analyze the computational complexity and privacy protection performance of these solutions. Finally, we discuss open issues to facilitate further studies.
Privacy in Internet of Things: From Principles to Technologies

Chao Li,Balaji Palanisamy

DOI: https://doi.org/10.1109/jiot.2018.2864168

IF: 10.6

2019-02-01

IEEE Internet of Things Journal

Abstract:Ubiquitous deployment of low-cost smart devices and widespread use of high-speed wireless networks have led to the rapid development of the Internet of Things (IoT). IoT embraces countless physical objects that have not been involved in the traditional Internet and enables their interaction and cooperation to provide a wide range of IoT applications. Many services in the IoT may require a comprehensive understanding and analysis of data collected through a large number of physical devices that challenges both personal information privacy and the development of IoT. Information privacy in IoT is a broad and complex concept as its understanding and perception differ among individuals and its enforcement requires efforts from both legislation as well as technologies. In this paper, we review the state-of-the-art principles of privacy laws, the architectures for IoT and the representative privacy enhancing technologies (PETs). We analyze how legal principles can be supported through a careful implementation of PETs at various layers of a layered IoT architecture model to meet the privacy requirements of the individuals interacting with IoT systems. We demonstrate how privacy legislation maps to privacy principles which in turn drives the design of necessary PETs to be employed in the IoT architecture stack.

computer science, information systems,telecommunications,engineering, electrical & electronic

Sensor-based IoT Data Privacy Protection

Privacy and Security in the Exploitation of Internet of Things

Privacy-Preserving Authentication in Wireless IoT: Applications, Approaches, and Challenges

A Privacy Aware Architecture for IoT Enabled Systems

Distributed Data Privacy Preservation in IoT Applications.

A Brief Survey on IoT Privacy - Taxonomy, Issues and Future Trends.

Big Data Privacy in the Internet of Things Era

Survey on IoT Privacy, Data Protection and Security Concerns

Understanding factors behind IoT privacy -- A user's perspective on RF sensors

IoT Data Privacy Protection Scheme Based on Blockchain

Data Privacy Preservation on the Internet of Things

Privacy in the Internet of Things for Smart Healthcare.

Users' Privacy Concerns in IoT Based Applications

Privacy-preserving raw data collection without a trusted authority for IoT

Recent Trends Towards Privacy‐preservation in Internet of Things, Its Challenges and Future Directions

Big Data Privacy Protection Based on Secure Compressive Sensing

The New Method of Sensor Data Privacy Protection for IoT

A Survey on Internet of Things Security from Data Perspectives

The Privacy Protection of IoT Data Fusion and Sensing Detection Under Artificial Intelligence Technology

An Overview of Privacy Preserving Schemes for Industrial Internet of Things

Privacy in Internet of Things: From Principles to Technologies