Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 1
Privacy in Ubiquitous Computing Options, Trends, and Implications of - - PowerPoint PPT Presentation
Privacy in Ubiquitous Computing Options, Trends, and Implications of - - PowerPoint PPT Presentation
Privacy in Ubiquitous Computing Options, Trends, and Implications of Smart Objects Marc Langheinrich Institut fr Pervasive Computing ETH Zrich Februar 11. 2006 ZiF-Workshop: Privacy and 1 Surveillance Technologies Privacy in Ubiquitous
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 2
Privacy in Ubiquitous Computing
Options, Trends, and Implications of Smart Objects
Marc Langheinrich Institut für Pervasive Computing ETH Zürich
“By 2010,... privacy will become a meaningless concept in Western societies (0.6 probability). Privacy will be forever lost because technology will allow us to make sense of the data we collect.”
Gartner Research, 2000
“By 2010,... privacy will become a meaningless concept in Western societies (0.6 probability). Privacy will be forever lost because technology will allow us to make sense of the data we collect.”
Gartner Research, 2000
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 3
Privacy and Technology
„The right to be let alone.“
Louis Brandeis, 1890 (Harvard Law
Review)
“Numerous mechanical devices
threaten to make good the prediction that ‘what is whispered in the closet shall be proclaimed from the housetops’”
Louis D. Brandeis, 1856 - 1941
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 4
The Vision of Ubiquitous Computing
Basic Motivation of Ubiquitous Computing
The computer as a tool for the everyday Things are aware of each other and the environment Integrating computers with intuitive user interfaces
„The most profound technologies are those that disappear. They weave themselves into the fabric of everyday life until they are indistinguishable from it.“
Mark Weiser (1952 – 1999), XEROX PARC
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 5
Smart Toaster
Gets weather forecast
from the Internet
Can remind you of
important dates (from your electronic agenda)
Qu Quelle: : http://news.bbc.co.uk/hi/english/sci/tech/newsid_1264000/1254205.stm
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 6
Smart Lawn Sprinkler
Lawn Sensor Reports
Dryness
Uses Weather Forecast
from Internet
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 7
Smart Mirror
Tips for Wardrobe
Selection, Make-Up
Mirror detects color
combinations
Closet and Washer know
which clothes are available
Takes Mood Into Account
Sensors in underwear Camera with face
recognition
I would suggest the Jeans with the black shoes today…
Lieber die blaue Hose mit den dunklen SchuhenFebruar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 8
Smart Mirror
Tips for Wardrobe
Selection, Make-Up
Mirror detects color
combinations
Closet and Washer know
which clothes are available
Takes Mood Into Account
Sensors in underwear Camera with face
recognition
I would suggest the Jeans with the black shoes today…
Lieber die blaue Hose mit den dunklen SchuhenSmart Mirror Prototype at ETH
Detects Clothing, Suggests Alternatives Based on Generic Color Theory Module
Smart Mirror Prototype at ETH
Detects Clothing, Suggests Alternatives Based on Generic Color Theory Module
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 9
Instead of „World inside the Computer“...
Not Not like this! World inside Computer would be Virtual Reality
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 10
„Computer in the World“
!
Ubiquitous Computing
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 11
Miniaturization
Integration into everyday things
New Materials
Novel input/output capabilities
Wireless Communication
Simplifies communication Facilitates cooperation and coordination
Sensors
„Smartness“ through context-awareness
Ubiquitous Computing –
Technology Drivers
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 12
Ubiquitous Computing –
Privacy Implications
Data Collection
Scale (everywhere, anytime) Kind (unnoticed, invisible) Reason („stockpiling“ knowledge)
Data Types
Sensory instead of factual
Data Access
„Internet of Things“
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 13
Higher Efficiency
Lean production (Overproduction, Out-of-Stock) Targeted Sales (1-1 Marketing)
More Convenience
Finding your way (e.g., travel assistants) Lower TCO (“total cost of ownership”) w/ pay-per-use
Increased Safety
Homeland security (terrorism, drug trafficking, etc.) Petty crimes & negligence (e.g., traffic accidents, theft)
Ubiquitous Computing –
Societal Drivers
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 14
Example: Health Industry
as Driving Factor for Ubiquitous Computing
Higher Efficiency
Localization system for medical personnel
facilitates highly dynamic scheduling
More Convenience
Senior citizens can live independently with the
help of a Smart Environment
Increased Safety
Electronically tagged blood packs and smart
emergency room lower chances of mistakes
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 15
CASPIAN vs. Benetton
Benetton announces RFID in Sisley clothing (March 2003) CASPIAN calls for boycott (www.spychips.com) Benetton retracts statement (April 2003)
Wal-Mart / Procter & Gamble (Fall 2003)
(Secret) field trial in Broken Arrow, Oklahoma Track consumer behavior with secret camera & RFID
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 16
CASPIAN vs. Benetton
Benetton announces RFID in Sisley clothing (March 2003) CASPIAN calls for boycott (www.spychips.com) Benetton retracts statement (April 2003)
Wal-Mart / Procter & Gamble (Fall 2003)
(Secret) field trial in Broken Arrow, Oklahoma Track consumer behavior with secret camera & RFID
Public Concern (as measured by Google)
Original numbers by Ravi Pappu,
RFID Privacy Workshop @ MIT: November 15, 2003
RFID 570,000 RFID and privacy 239,000 (42%)
November 2003
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 17
CASPIAN vs. Benetton
Benetton announces RFID in Sisley clothing (March 2003) CASPIAN calls for boycott (www.spychips.com) Benetton retracts statement (April 2003)
Wal-Mart / Procter & Gamble (Fall 2003)
(Secret) field trial in Broken Arrow, Oklahoma Track consumer behavior with secret camera & RFID
Public Concern (as measured by Google)
Original numbers by Ravi Pappu,
RFID Privacy Workshop @ MIT: November 15, 2003
RFID 570,000 RFID and privacy 239,000 (42%)
November 2003
RFID 2,340,000 RFID and privacy 1,060,000 (45%)
July 2004
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 18
CASPIAN vs. Benetton
Benetton announces RFID in Sisley clothing (March 2003) CASPIAN calls for boycott (www.spychips.com) Benetton retracts statement (April 2003)
Wal-Mart / Procter & Gamble (Fall 2003)
(Secret) field trial in Broken Arrow, Oklahoma Track consumer behavior with secret camera & RFID
Public Concern (as measured by Google)
Original numbers by Ravi Pappu,
RFID Privacy Workshop @ MIT: November 15, 2003
RFID 570,000 RFID and privacy 239,000 (42%)
November 2003
RFID 2,340,000 RFID and privacy 1,060,000 (45%)
July 2004
RFID 4,550,000 RFID and privacy 3,110,000 (68%)
November 2005
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 19
CASPIAN vs. Benetton
Benetton announces RFID in Sisley clothing (March 2003) CASPIAN calls for boycott (www.spychips.com) Benetton retracts statement (April 2003)
Wal-Mart / Procter & Gamble (Fall 2003)
(Secret) field trial in Broken Arrow, Oklahoma Track consumer behavior with secret camera & RFID
Public Concern (as measured by Google)
Original numbers by Ravi Pappu,
RFID Privacy Workshop @ MIT: November 15, 2003
RFID 570,000 RFID and privacy 239,000 (42%)
November 2003
RFID 2,340,000 RFID and privacy 1,060,000 (45%)
July 2004
RFID 4,550,000 RFID and privacy 3,110,000 (68%)
November 2005
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 20
Emnid Survey Germany (03/2002)
50% have at least one loyalty card 72% welcome such offers
70 Million Cards in Circulation (12/2003)
Average rebate: 1.0-0.5% 15% of consumers estimate rebate being 5-10%
Minding the Fine Print?
Explicit signature allows detailed data mining Consequences?
Example: RFID and Retail
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 21
Consumer Loyalty Cards –
The Dark Side
The Story of Robert Riveras (1998)
Slipped on spilled yoghurt and hurt kneecap. Sued. Consumer card showed high volume licqour purchases Settled out of court
Or: Divorce Case
Liking of expensive wines
increased alimony payments
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 22
Consumer Loyalty Cards –
Legal Implications
Arson Near Youth House Niederwangen (Berne)
At scene of crime: Migros-tools Court ordered disclosure of all 133
consumers who bought items on their supermarket card (8/2004)
Arsonist not yet found (11/2005)
Informed Consent?
Who Would Think of Such Things When Buying a Screwdriver?!
Informed Consent?
Who Would Think of Such Things When Buying a Screwdriver?!
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 23
Higher Efficiency
Lean production (Overproduction, Out-of-Stock) Targeted Sales (1-1 Marketing)
More Convenience
Finding your way (e.g., travel assistants) Lower TCO (“total cost of ownership”) w/ pay-per-use
Increased Safety
Homeland security (terrorism, drug trafficking, etc.) Petty crimes & negligence (e.g., traffic accidents, theft)
Ubiquitous Computing –
Societal Drivers
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 24
Renting Instead of Buying
Popular Concept Today
Leasing, Car-Sharing „Digital Rights Management“
Ubicomp: Everything can be Rented:
Sensors determine time and manner of use Even furniture (chairs, sofas, etc) can be
rented “per-use” (e.g., Hotels)
Cross-marketing potential: rental fridge
- ffers “cheaper” cooling for partner groceries
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 25
The Smart Tachograph Prototype (Video)
Sensors GPS
Coroam Coroama and a and Langhe Langheinrich.: inrich.: The Smart Tachograph. Video at Ubicomp 2005. Tokyo, Japan
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 26
Pay-by-Drive Traffic-Cost Accounting
Efficient
Insurers can properly evaluate risk Customers can save on safe driving
Fair
Drivers don’t cross finance Traffic costs are billed to originators
Safe
Encourages safe driving (cheaper) Reckless driving detectable in real-time
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 27
Acceptable Privacy Intrusions?
Autograph System
Test pilot 1998/99, Houston, TX Insurance rate depends on driving hours Black box sends GPS location to service center
Consumer Feedback Generally Positive
Average of 25% savings for consumers! More acceptable for company vehicle fleet?
So Source: In ce: Insurance nce & Technolo Technology Online, gy Online, Jan 2nd 2002 Jan 2nd 2002 (http://www.insurancetech.com/story/update/IST20020108S0004)
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 28
Vision Zero
www.vision-zero.com
Swiss Traffic Initiative (since 8/02 renamed „VESIPO“)
Goal: Zero casualties on Swiss roads Similar initiatives on EU level
Envisioned Tools (Sample)
Significantly higher fines Telemetry-based solutions, e.g., mandatory alcohol levels
verification; automated speed limiter.
Smart but “Unloyal” Cars?
Report all violations directly to police “Technology Paternalism” (Pallas & Spiekermann)
Saab’s “Alcohol Lock-Out” Key
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 29
Conclusions: Ubicomp Implications
Social Implications (Not Talked About Here)
Complexity
Complexity: Who can manage hundreds of devices?
Loss of Control
Loss of Control: Responsibilities? Freedom of choice?
Social Pressure
Social Pressure: Usage optional? Benefit of doubt?
Manipulation
Manipulation: Subtle forms of influence? Fairness?
Privacy?
Ubicomp as driver
driver for voluntary voluntary privacy restrictions
Prompts need to redefine
redefine socially acceptable intrusions
Who knows best what is beneficial
what is beneficial for the individual?
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 30
Ubicomp Requires Answers…
How Simple Do We Want Our Lives To Be?
Smart systems need to know a lot about us
How Far Do We Want To Commercialize Our Life?
Detailed profiles save money
How Safe Do We Think We Can Make Our Life?
Can total surveillance guarantee total safety?
Who Is To Give Those Answers, Sets the Rules?
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 31
Which Future Should We Want?
Welche Zukunft sollen wir wollen?
(A. Roßnagel 1993)
Februar 11. 2006 ZiF-Workshop: Privacy and Surveillance Technologies 32