Semi-autonomous, context-aware, agent using behaviour modelling and reputation systems to authorize data operation in the Internet of Things

TL;DR

This paper presents a semi-autonomous, context-aware agent that models user behavior and uses reputation systems to manage data access permissions in the Internet of Things, aiming to enhance user privacy and control.

Contribution

It introduces a novel privacy management system combining behavior modeling, context-awareness, and reputation systems within a rule-based agent for IoT data authorization.

Findings

The system effectively manages data permissions in IoT environments.

It maintains user control while automating consent decisions.

The approach addresses legal and practical challenges of informed consent.

Abstract

In this paper we address the issue of gathering the "informed consent" of an end user in the Internet of Things. We start by evaluating the legal importance and some of the problems linked with this notion of informed consent in the specific context of the Internet of Things. From this assessment we propose an approach based on a semi-autonomous, rule based agent that centralize all authorization decisions on the personal data of a user and that is able to take decision on his behalf. We complete this initial agent by integrating context-awareness, behavior modeling and community based reputation system in the algorithm of the agent. The resulting system is a "smart" application, the "privacy butler" that can handle data operations on behalf of the end-user while keeping the user in control. We finally discuss some of the potential problems and improvements of the system.