The vision for IoT is an environment with ubiquitous interconnected, software-enabled devices. While there has been much progress on user discovery of services, the focus has not included the privacy properties of these services. These privacy properties may also be of interest to those considered more subjects of these services than actual users, for instance, in the case of a smart city sound monitor. This discovery and communication to the user we call the last mile for IoT privacy. People need a unified way to discover and be notified about privacy properties of IoT services, accommodating user attitudes and preferences as part of the design. Similar to users of the Web or a personal computing device, users should be able to define privacy preferences and manage the data that is generated and consumed by services in their environment. This talk outlines a conceptual privacy stack that bridges this last mile to the user and, in the context of this stack, describes current research.
Richard Chow is a University Research Director and Scientist at Intel Corporation. In the past, he has held positions as Research Scientist at PARC, Research Scientist at Samsung Electronics R&D, and Security Architect at Yahoo and Motorola. His work concentrates on privacy, big data, mobile, and the cloud. He has over 20 US patents and patent applications and over 30 peer-reviewed journals, conference papers, and book chapters. He was awarded runner-up for the 2010 PET Award for Outstanding Research in Privacy Enhancing Technologies. He has given invited talks at academic conferences and industry venues such as the RSA Conference, BlackHat, and OWASP. He has a Ph.D. in mathematics from the University of California at Los Angeles.