Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163
Showing posts with label PRIME Project. Show all posts
Showing posts with label PRIME Project. Show all posts

Friday, March 28, 2008

There is Life after PRIME: PrimeLife …

As you might be aware, after 4 years the EU PRIME Project (Privacy for Identity Management in Europe) has come to an end. But it is not all over … The EU PrimeLife Project is going to be one of its follow-ups:

“The European Union is to spend £7.8m on a three-year project to enhance users' privacy in social networks, virtual communities and other Web 2.0 technologies. PrimeLife's short-term goal is to provide scalable and configurable privacy and identity management in new and emerging internet services and applications. In the longer term, it aims to develop tools that will protect individuals' privacy throughout their life.
Jan Camenisch, PrimeLife's technical leader, said everyone who used the internet left "virtual footprints" that others could collect and use without their knowledge. This was made possible by advances in technologies for data collection, unlimited storage, and reuse and lifelong linkage of these digital traces, he said. …” (more details are available in Ian Grant’s article).

Additional details are available in another article by Bryan Betts, Techword:

“PrimeLife's co-ordinator is IBM's Zurich research laboratory, and it follows on from an earlier EU-backed project into identity management systems, called Prime (Privacy and Identity Management in Europe). Where Prime was mostly concerned with identity management (see its white paper here), PrimeLife will go beyond that to address privacy management and trust issues across a user's entire lifespan from childhood to old age, said IBM cryptography researcher Jan Camenisch, who is the project's technical leader.
…”

Finally, this article provides some additional information on its scope and participants:

“Several PrimeLife partners are participants in industry and standardization groups such as the World Wide Web Consortium’s PLING, Liberty Alliance, ISO/IEC JTC 1, and ITU. Furthermore, PrimeLife will work and interact with relevant open-source communities such as Higgins, as well as with other research projects in order to achieve the sustainability of these project results.

PrimeLife’s multidisciplinary consortium consists of the coordinator, the IBM Zurich Research Laboratory, Switzerland, and project partners from various countries: Center for Usability Research & Engineering, Austria; Katholieke Universiteit Leuven, Belgium; GEIE ERCIM, France; Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Technische Universität Dresden, Johann Wolfgang Goethe-Universität Frankfurt am Main, Europäisches Microsoft Innovations Center GmbH, Giesecke & Devrient GmbH and SAP AG, Germany; Università degli Studi di Bergamo and Università degli Studi di Milano, Italy; Stichting Katholieke Universiteit Brabant, The Netherlands; Karlstads Universitet, Sweden; and Brown University, United States of America.”

--- NOTE: my original HP blog can be found here ---

Monday, March 17, 2008

PRIME Project Closing Event

The EU PRIME Project “Closing Event” is going to happen on Monday, July 21 2008, at the Katholieke Universiteit Leuven.

This event, held in conjunction with the 8th PET Symposium 2008, includes presentations of the PRIME results:
  • Display of Application Prototypes (integrated Prototype, LBS, Collaborative eLearning, OnionCoffee, PRIME tutorials)
  • Social, legal and economic requirements, framework and architecture, policies

More information and registration details are available here.

--- NOTE: my original HP blog can be found here ---

Monday, March 10, 2008

PRIME Tutorials

With the EU PRIME Project coming to an end, a few tutorials have been published online:
  • General Public Tutorial: “Privacy issues are not only a phenomenon of the digital world. In the offline world, we are also confronted with privacy issues – consciously as well as unconsciously. This tutorial raises awareness for this topic and gives an overview of privacy issues which are typically associated with the use of information technologies in the digital world. Solutions to avoid risks concerning privacy issues were pointed out and possibilities of protecting privacy in the digital world are shown.”
  • Advanced Tutorial: “The Advanced Tutorial (for developers, decision makers and privacy commissioners) introduces selected concepts and core ideas which are relevant at current state of the project PRIME and addresses primarily developers and researchers in the field of privacy-enhancing identity management.”

--- NOTE: my original HP blog can be found here ---

Wednesday, February 13, 2008

EU PRIME “Primer” available online …

The EU “Privacy for Identity Management in Europe” (PRIME) Project is going to officially finish by the end of February 2008.

Lots of material is available online, and new documents will be added in this final phase of the project. A PRIME Primer has been recently released in the PRIME web site.

--- NOTE: my original HP blog can be found here ---

Saturday, September 29, 2007

Privacy Management in Enterprises? It is a matter of Enforcement and Automation …

Privacy policy enforcement and automation are, in my view, two key aspects necessary to improve enterprise privacy management practices.

Privacy auditing and compliance checking are reactive approaches, definitely important but of little help when violations occur and the “privacy” of people has been compromised (e.g. their personal data has been misused, identity thefts, etc.). More effort is required to enforce privacy policies, in particular by introducing more automation (and integration with current enterprise identity management solutions …).

At HP Labs we have been researching for years in this direction. Some relevant projects have focused on:

In the context of the PRIME project, various Privacy Enhancing Approaches and Technologies have also been researched and developed.

More recently, the Identity Governance Framework (IGF) effort has introduced use cases, approaches and criteria to deal with data governance and enforce privacy both in enterprises and federated identity management contexts.

I argue that the decision on the “actual blend” of policy enforcement and auditing/compliance checking should be the outcome of a “risk analysis” process, which must keep into account the specific enterprise context and the assets to be protected.

--- NOTE: my original HP blog can be found here ---

Thursday, September 20, 2007

PRIME Project News

News from the General PRIME meeting:

“The PRIME project recently received more support and endorsement for its work to raise awareness and knowledge about Privacy-Enhancing Technologies for identity management to a wider audience that makes the decisions which will affect their take-up in real applications.

The main activities in PRIME are about advancing the state of the art in user-centric identity management, including in PETs themselves, but it also has an outreach and dissemination objective to ensure that its technology work is made known to all communities whose decisions will affect how these advances are made available for real use. As part of that objective, it has written two White Papers on its work, which are aimed at different audiences and will be soon made available on PRIME website http://www.prime-project.eu/ . The second of these is aimed at IT professionals.

A currently public version of the PRIME Whitepaper (v2) is available here.

PRIME is very keen to ensure that its work remains focused on topics that are relevant and on results that are deployable in real situations. To that end, it formed a project advisory board, named the Reference Group,that provides guidance on direction and priorities and reviews the project's output.

The Reference Group comprises more than a dozen professionals from various countries' data protection commissions and privacy specialists from industry, consumer groups and academia. They recently reviewed the second White Paper and were very positive about it and the role it could play in bringing about wide adoption of PETs. The project is now making plans for another White Paper, together with other educational materials, such as tutorials, that will be aimed at other communities.”

--- NOTE: my original HP blog can be found here ---

Tuesday, September 18, 2007

EU PRIME Project – Look Forward to Hearing from You!

I am currently attending a General Meeting (one of the last – the project is meant to finish by the beginning of next year) of the EU PRIME Project (Privacy for Identity Management in Europe).

Current PRIME results and published documents (in terms of requirements, approaches to privacy, whitepapers, reports, architecture, prototypes, etc.) are available here.

We look forward to hearing from you: any question, concern, feedback, etc. is welcome. I’ll make sure to share this with the team here and let you know about any reply.

--- NOTE: my original HP blog can be found here ---