Towards Contractual Agreements for Revocation of Online Data - ICT Systems Security and Privacy Protection Access content directly
Conference Papers Year : 2019

Towards Contractual Agreements for Revocation of Online Data

Abstract

Once personal data is published online, it is out of the control of the user and can be a threat to users’ privacy. Retroactively deleting data after it has been published is notoriously unreliable due to the distributed and open nature of the Internet. Cryptographic approaches implementing data revocation address this problem, but have serious limitations when considering practical deployment, and they have not been broadly adopted.In this paper, we tackle the problem of data revocation from a different perspective by examining how contractual agreements can be applied to create incentives for providers to conform to expiration regulations. Specifically, we propose a protocol to automate the handling of data revocation. We have implemented a prototype smart contract on a local Ethereum blockchain to demonstrate the feasibility of our approach. Our approach has distinct advantages over existing proposals: It can deal with a wide spectrum of revocation conditions, it can be applied retroactively after data has been published, and it does not require additional effort for users accessing the published data. It thus constitutes an interesting, novel approach to data revocation.
Fichier principal
Vignette du fichier
485650_1_En_26_Chapter.pdf (413.78 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03744301 , version 1 (02-08-2022)

Licence

Attribution

Identifiers

Cite

Theodor Schnitzler, Markus Dürmuth, Christina Pöpper. Towards Contractual Agreements for Revocation of Online Data. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.374-387, ⟨10.1007/978-3-030-22312-0_26⟩. ⟨hal-03744301⟩
17 View
46 Download

Altmetric

Share

Gmail Facebook X LinkedIn More