METHOD AND APPARATUS FOR PROVIDING PRIVACY POLICY FOR DATA STREAM

• US 20140096261A1
• Filed: 10/01/2012
• Published: 04/03/2014
• Est. Priority Date: 10/01/2012
• Status: Abandoned Application

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: BOLDYREV, SERGEY, BISWAS, DEBMALYA
• Application Number:
  US13/632,926
• Publication Number:
  US 20140096261A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies

Abstract

An approach for providing a privacy policy for a data stream is described. A privacy policy determination platform causes, at least in part, an interception of at least one data stream accessible to at least one processing element of a stream processing framework. The privacy policy determination platform also causes, at least in part, a parsing of the at least one data stream to determine privacy sensitive data associated with at least one user. The privacy policy determination platform further determines at least one privacy policy for the at least one user, the at least one processing element, the at least one data stream, or a combination thereof based, at least in part, on the privacy sensitive data.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

an interception of at least one data stream accessible to at least one processing element of a stream processing framework;

a parsing of the at least one data stream to determine privacy sensitive data associated with at least one user; and

at least one determination of at least one privacy policy for the at least one user, the at least one processing element, the at least one data stream, or a combination thereof based, at least in part, on the privacy sensitive data.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of one or more environmental conditions associated with the at least one user,

wherein the at least one privacy policy is further based, at least in part, on the one or more environmental conditions.

3. A method of claim 2, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a processing of the privacy sensitive data, the one or more environmental conditions, or a combination thereof to determine at least one privacy score,

wherein the at least one privacy policy is based, at least in part, on the at least one privacy score.

4. A method of claim 3, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of the at least one privacy score, the at least one privacy policy, or a combination thereof based, at least in part, on one or more categories of the privacy sensitive data,

wherein the one or more categories include, at least in part, a location category, a contacts category, a content category, a context category, or a combination thereof.

5. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of one or more outputs of the at least one processing element,

wherein the at least one privacy policy is further based, at least in part, on the one or more outputs.

6. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of the at least one privacy policy with respect to one or more levels of abstraction of the privacy sensitive data.

7. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination that one or more other processing elements have access to the at least one data stream; and

an adaptation of the at least one privacy policy to the one or more other processing elements.

8. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination that the at least one privacy policy causes, at least in part, a restriction of a use of the at least one data stream by the at least one processing element; and

at least one determination of at least one alternate data stream to substitute for the at least one data stream.

9. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a recommendation of the at least one privacy policy to the at least one user;

an enforcement of the at least one privacy policy based, at least in part, on an acceptance input for the recommendation by the at least one user.

10. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

an initiation of the interception of the at least one data stream, the processing of the at least one data stream, the determining of the at least one privacy policy, or a combination thereof at a run-time of the at least one processing element.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

cause, at least in part, an interception of at least one data stream accessible to at least one processing element of a stream processing framework;

cause, at least in part, a parsing of the at least one data stream to determine privacy sensitive data associated with at least one user; and

determine at least one privacy policy for the at least one user, the at least one processing element, the at least one data stream, or a combination thereof based, at least in part, on the privacy sensitive data.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

determine one or more environmental conditions associated with the at least one user,

wherein the at least one privacy policy is further based, at least in part, on the one or more environmental conditions.

13. An apparatus of claim 12, wherein the apparatus is further caused to:

process and/or facilitate a processing of the privacy sensitive data, the one or more environmental conditions, or a combination thereof to determine at least one privacy score,

wherein the at least one privacy policy is based, at least in part, on the at least one privacy score.

14. An apparatus of claim 13, wherein the apparatus is further caused to:

determine the at least one privacy score, the at least one privacy policy, or a combination thereof based, at least in part, on one or more categories of the privacy sensitive data,

wherein the one or more categories include, at least in part, a location category, a contacts category, a content category, a context category, or a combination thereof.

15. An apparatus of claim 11, wherein the apparatus is further caused to:

determine one or more outputs of the at least one processing element,

wherein the at least one privacy policy is further based, at least in part, on the one or more outputs.

16. An apparatus of claim 11, wherein the apparatus is further caused to:

determine the at least one privacy policy with respect to one or more levels of abstraction of the privacy sensitive data.

17. An apparatus of claim 11, wherein the apparatus is further caused to:

determine that one or more other processing elements have access to the at least one data stream; and

cause, at least in part, an adaptation of the at least one privacy policy to the one or more other processing elements.

18. An apparatus of claim 11, wherein the apparatus is further caused to:

determine that the at least one privacy policy causes, at least in part, a restriction of a use of the at least one data stream by the at least one processing element; and

determine at least one alternate data stream to substitute for the at least one data stream.

19. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, a recommendation of the at least one privacy policy to the at least one user;

cause, at least in part, an enforcement of the at least one privacy policy based, at least in part, on an acceptance input for the recommendation by the at least one user.

20. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, an initiation of the interception of the at least one data stream, the processing of the at least one data stream, the determining of the at least one privacy policy, or a combination thereof at a run-time of the at least one processing element.

21-48. -48. (canceled)