Privacy Risks Emerging from the Adoption of Innocuous Wearable Sensors in the Mobile Environment
Authors: Andrew Raij, Animikh Ghosh, Santosh Kumar, and Mani Srivastava
Authors Bios:
Andrew Raij- a Post Doctoral Fellow in the Wireless Sensors and Mobile Ad Hoc Networks Lab (WiSe MANet) at the University of Memphis and has a PhD from the University of Florida.
Animikh Ghosh - a Junior Research Associate at Infosys Technologies Ltd. and has a Masters of Computer Science from the University of Memphis.
Santosh Kumar - an Associate Professor at the University of Memphis and advises the WiSeMANet Lab.
Mani Srivastava is a Professor of Computer Science at UCLA and is also highly involved as an electrical engineer.
Venue : This paper was presented at the CHI '11 Proceedings of the 2011 annual conference on Human factors in computing systems
Summary
Hypothesis:
The reasearchers of the paper pointed out that mobile sensors that are used to study one's health can also be used for learning new algorithms. Their hypothoses was based on how much individuals care about their private habits being made public; and the researchers believe that people don't want certain personal attributes like health conditions, dictate how people will treat them in the workplace, or use against them.
Methods:
The developers made a framework to better explain the scenario being discussed in the paper and it consisted of
- measurements - raw data that comes from sensors such as acclerometer readings and heart rates.
- behavior - actions the user performed that can be inferred from the measurements such as seizures.
- context - explain behaviors by observing the environment that the behavior occurred in such as time, place, and people that were nearby.
- restrictions - applied to all 3 of the previous elements and produce a limiting effect such as limiting access to accelerometer data or keeping the time private.
- abstractions - offer a way to restrict data to a desirable amount so as to have enough data to monitor whatever is being studied but leaving out other details.
- privacy threats - harms that result from matching data to an identity.
The study had 3 goals: assess privacy concern of individuals
before and
after the study. The researchers used their framework to examine restrictions and abstractions, and assess how identification of the data affects the concern levels of participants.
66 participants were recruited for the study and divided into 2 groups. 1 group, Group NS, only filled out a privacy survey and the other, Group S, gave physiological, behavioral, and psychological data to a sensing device, the AutoSense, for 3 days with questionnaires throughout the study. Upon completion of the data collection participants viewed the data collected in a system called Aha visualization, developed for this study, that showed the data at different abstraction levels and responded to a privacy questionnaire knowing what was collected.
Results:
Positively-associated activities, like exercise, were acceptable to share, as was location. Group 1 (with no data stake) and the group who had not yet learned of the extent of the data collected about them had similar levels of unconcern for data storage. After learning about their data, the second group had higher concern ratings. The researchers also found that participants seemed initially naive to the danger of shared data, with the exception of location.
Conclusion:
The researchers wanted to find out how concerned users were about sensor data being used to determine things about them and how to prevent identifiable information from being released. They were correct on their hypothesis that most wouldn't want to give information that could possibly be used to judge them.
Discussion:
Since technology is enveloping humans daily lives more and more each year. It's gonna be tough for companies not to notice information, or gain information about somones habits and health condition. I hope in some way, they could use more experiments like this one to gauge what should be private and more protected then other information. I do believe that the researchers found their hypothesis to be valid.