User privacy framework for web-of-objects based smart home services

This paper presents user privacy framework for web-of-objects based smart home services to control the release of personally identifiable information (PII) in smart home environment. The ubiquity of smart home enables smart home users and third parties to access home devices and data from any location at any time. The ubiquitous and pervasiveness improves the user comfort level, but also makes user PIIs highly prone to leakage. We propose Smart Home Web of Object User Privacy (SWOPR) architecture to protect and control the release of user PIIs according to the user consent. We suggest an architecture that integrates the RESTful framework, ISO/IEC-29101, and XACML/Ontology; the integration is not supported in existing systems. The SWOPR introduces Smart Home Web of Objects Privacy Controller (SWOPC) and Privacy Processor (SWOPP) nodes. SWOPC controls the process of collection of PIIs from users to the release of his PIIs to others. SWOPP provides PIIs processing functions such as anonymization and encryption under the control of SWOPC. The proposed privacy framework architecture is simple, lightweight and has high performance. We also present service scenarios to acquire the user PIIs, consents and release of PIIs to others.