Secure system and method for enforcement of privacy policy and protection of confidentiality

• US 8,327,451 B2
• Filed: 06/10/2008
• Issued: 12/04/2012
• Est. Priority Date: 08/30/2002
• Status: Active Grant

• Current Assignee: Slingshot IOT LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Duri, Sastry S., Gruteser, Marco O., Liu, Xuan, Moskowitz, Paul A., Perez, Ronald, Schonberg, Edith G., Singh, Moninder, Tang, Jung-Mu, Tresser, Charles P.
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US12/136,544
• Publication Number:
  US 20080307491A1
• Time in Patent Office: 1,638 Days
• Field of Search: 726/1, 726/26, 726/2, 713/193, 713/176, 705/14.63
• US Class Current: 726/26
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The invention includes various systems, architectures, frameworks and methodologies that can securely enforce a privacy policy. A method is included for securely guaranteeing a privacy policy between two enterprises, comprising: creating a message at a first enterprise, wherein the message includes a request for data concerning a third party and a privacy policy of the first enterprise; signing and certifying the message that the first enterprise has a tamper-proof system with a privacy rules engine and that the privacy policy of the first entity will be enforced by the privacy rules engine of the first enterprise; sending the message to a second enterprise; and running a privacy rules engine at the second enterprise to compare the privacy policy of the first enterprise with a set of privacy rules for the third party.

Claims

1. An automotive telematics system having a privacy protection framework, comprising:

at least one sensor for collecting sensor data from a vehicle; and

a computer device including a data protection manager for managing the sensor data, wherein the data protection manager includes;

a system for receiving data requests for sensor data from a first application of a plurality of applications;

a privacy engine that ensures the first application requesting sensor data has a privacy policy that complies with a privacy policy of the privacy engine;

a virtual blackboard at both the vehicle and the first application for publishing the requested sensor data and application data on the virtual blackboard; and

an application support layer for isolating a second application by defining access to the first application and the automotive telematics system, wherein the isolating includes deploying the second application to a sandbox, and wherein the defining access is associating the sandbox with a set of access privileges to at least one resource of the automotive telematics system.

2. The automotive telematics system of claim 1, further comprising:

a system for authenticating a data request made by the first application.

3. The automotive telematics system of claim 1, further comprising:

a system for storing each data request in a data log; and

a system for auditing said data log.

4. The automotive telematics system of claim 1, wherein the first application resides in one of the vehicle and a computing system outside of the vehicle.

5. The automotive telematics system of claim 1, wherein requests for data by the first application from a second application are processed by the privacy engine to assure that the privacy policy of the first application complies with the privacy policy of the second application.

6. The automotive telematics system of claim 1, wherein data requests are one of event and subscription based.

7. The automotive telematics system of claim 1, wherein:

the privacy engine includes a plurality of privacy policies;

the data protection manager associates sensor data with one of the plurality of privacy policies; and

the privacy engine ensures that each request for sensor data complies with an associated privacy policy.

8. The automotive telematics system of claim 1, wherein:

the privacy engine includes a plurality of privacy policies;

each of the privacy policies is corresponds to a different type of application; and

the privacy engine ensures that each application requesting data complies with a privacy policy.

9. The automotive telematics system of claim 1, wherein the data protection manager comprises a secure coprocessor.

10. The automotive telematics system of claim 1, wherein the virtual blackboard allows sensor data and application data to be accessed locally and remotely.

11. The automotive telematics system of claim 1, wherein the data protection manager further comprises an application registry for registering applications.

12. The automotive telematics system of claim 1, wherein the first application is an aggregation application for aggregating sensor data.

13. The automotive telematics system of claim 1, wherein the aggregation data is the aggregated sensor data.

14. The automotive telematics system of claim 1, wherein the sandbox is one of a plurality of sandboxes, each sandbox associated with a set of access privileges to at least one resource of the automotive telematics system.

15. The automotive telematics system of claim 14, wherein each sandbox is associated with a name space.

16. The automotive telematics system of claim 14, wherein a degree of isolation is controlled by structuring an execution environment of the name spaces to define availability of at least one other application and at least one resource of the automotive telematics system to each application.