PDGuard: an architecture for the control and secure processing of personal data

摘要

Online personal data are rarely, if ever, effectively controlled by the users they concern. Worse, as demonstrated by the numerous leaks reported each week, the organizations that store and process them fail to adequately safeguard the required confidentiality. In this paper, we proposepdguard, a framework that defines prototypes and demonstrates an architecture and an implementation that address both problems. In the context ofpdguard, personal data are always stored encrypted as opaque objects. Processing them can only be performed through thepdguard application programming interface (api), under data and action-specific authorizations supplied online by third party agents. Through these agents, end-users can easily and reliably authorize and audit how organizations use their personal data. A static verifier can be employed to identify accidentalapimisuses. Following a security by design approach,pdguard changes the problem of personal data management from the, apparently, intractable problem of supervising processes, operations, personnel, and a large software stack to that of auditing the applications that use the framework for compliance. We demonstrate the framework's applicability through a reference implementation, by building apdguard-based e-shop, and by integratingpdguard into theThe Guardiannewspaper's website identity application.