prime economics wp sub-contractors meeting thursday 16th december, 2004 21.00 – 21.30 in den...

PRIME Economics WPSub-contractors Meeting

Thursday 16th December, 2004 21.00 – 21.30

In Den Rustwat

Dec. 17, 2004 ERIM/PRIME Privacy for Business Workshop - The Airlines Sector

2

PRIME Project Lifecycle• Phase I: Initial Framework

• Phase II: Initial Prototypes

• Phase III: Research and IDM Prototype I

• Phase IV: Research and IDM Prototype II• Phase V: Consolidation

Source: PRIME Technical Annex I


3

Phase I: Initial Framework • In this phase (months 1-3), the project organizes itself in small

teams consisting of application domain experts and experienced researchers in privacy technology, with the objective of developing a common set of concepts and terminology. This will be used throughout the project and will generate innovative application scenarios and new business models. These teams produce tutorials and develop the PRIME framework version 0. Simultaneously, the project sets up its development environment, develops its public website, and produces a first press release on PRIME.

• Milestone M1 closes this phase with the review of the PRIME framework version 0.


4

Phase II: Initial Prototypes• The goal of this phase (months 4-9) is to enrich and refine the shared understanding of

privacy-enhancing IDM gathered during Phase I and to draft first version of the end results of PRIME. Furthermore, research is started in this phase.

• The initial requirements are collected from the legal, socio-economic, and application viewpoints. The initial privacy-friendly solutions are drafted. The initial prototypes for the mechanisms are produced, based on the technology available from the partners or from third parties (e.g., open source projects). The first HCI mock-ups for privacy-enhancing IDM are developed. The PRIME architecture version 0 is defined. Existing assurance criteria and methods applicable to privacy enhancing IDM are selected. Initial versions of tutorials on the technology are produced. These early deliverables play a major role for deepening the common understanding on privacy-enhancing technology and principles by the project members as early as possible.

• The early prototypes allow also for an early start of the evaluations: they are evaluated from the legal, socio-economic, HCI and application standpoints, based on the requirements collected during this phase. These evaluation results guide the selection of application target domains for which application prototypes will be developed during the subsequent phases.

• Milestone M2 marks the end of the phase with the evaluation of the initial prototypes.


5

Phase III: Research and IDM Prototype I• This phase (months 10-24) provides the delivery of the first set of research results and runs a

first iteration on this basis to develop the integrated IDM prototype version 1 and associated applications for evaluation.

• The project develops HCI guidelines and proposals. It refines the initial requirements from the legal, social and economic requirements, business models and application standpoints. It elicits the specific requirements of the selected application prototypes.

• The research and development of technology prototypes proceeds along the lines defined by the architecture and the HCI guidelines. These prototypes are integrated into user-side and services-side IDM prototypes to achieve the release of the integrated IDM prototype version 1.

• Simultaneously, the project collects specific requirements for the selected application solutions, develops the application prototypes that have been selected, revises its framework and architecture to produce version 1, and develops appropriate assurance methods. The integrated IDM prototype undergoes evaluation from the legal, social, economic, HCI, business modelling, and assurance viewpoints. The integrated IDM prototype is also evaluated on the basis of the application prototypes running in the context of trials with a limited set of users. The team releases its second annual research report.

• Milestone M5 closes this phase with the publication of the second annual research report and review of the evaluation of PRIME technology version 1.


6

Phase IV: Research and IDM Prototype II• This phase (months 25-42) represents a second iteration in technology

research and evaluation with the development of the integrated IDM prototype version 2 and associated applications.

• Based on the results obtained during the preceding phase, the project revises the requirements from the different disciplines, updates the PRIME framework, and incorporated the new technology developed in the integrated IDM prototype version 2 and refines the latter. Additional application prototypes are developed accordingly. The PRIME framework and architecture are revised and released as version 2.

• The integrated IDM prototype is subjected to evaluation along the same lines as in the preceding phase: it is evaluated against legal, social, economic, HCI, business modelling, and assurance requirements. It is also evaluated on a technical level through its development and trials of the application prototypes.

• Milestone M7 closes this phase with the review of the evaluation of PRIME technology version 2.


7

Phase V: Consolidation • This phase (months 43-48) takes the results of the

previous phases into account to consolidate the research results, finalise the requirements, the PRIME framework, architecture, and prototype.

• Milestone M8 marks the end of the phase and the project with the publication of these results in the form of the third annual research report, the framework and architecture version 3, and the project Final Report. The latter draws lessons from the project and provides directions for future research.


8

Project Structure and Major Blocks

Fra

mew

ork

Wh

ite p

ape

r

Arc

hite

ctu

re

Te

chn

olo

gyp

ersp

ect

ive

Se

lect

.

Pro

toty

pes

Eva

l.

Leg

al, s

oci

o-e

cono

mic

pe

rspe

ctiv

e

Ap

plic

atio

n p

ersp

ect

ive

Pro

toty

pe

s

Re

q.

Eva

l.

Block 1:Requirements and Evaluation

(Legal, Social, Economic, Applications)

Block 5:Management and Dissemination

Pro

toty

pes

Eva

luat

ions

Req

uire

me

nts

Re

sea

rch

Hig

h-qu

alit

y re

sea

rch

Pro

toty

pes

Con

trib

utio

ns t

o st

and

ardi

zatio

n

Gu

ida

nce

Gui

dan

ce

Block 2:Application Prototypes

Block 4:Framework and Architecture

Block 3:Mechanisms Research

and Development

(Assurance, HCI, Ontologies, Authorization,Crypto, Communication, User-side/Services-

side Identity Management, Education)

Req. 0 Requirements 2Requirements 1

Fra

mew

ork

0

Year 1 Year 2 Year 3 Year 4

Requirements 3

Block 1: Requirements and Evaluation

Application Prototypes Version 1 & Evaluations

Application Prototypes Version 2 & Evaluations

Block 2: Application Prototypes

Early Prototypes &Evaluations

Integrated Prototype Version 1 & Evaluations

Integrated Prototype Version 2 & Evaluations

Integrated Prototype Version 3

Block 3: Mechanisms Research and Development

Arch 0 Architecture Version 1 Architecture Version 2 Architecture Version 3

Framework Version 1 Framework Version 2 Framework Version 3

Block 5: Management and Dissemination

Research

Block 4: Framework and Architecture

Phase II Phase III Phase IV Phase VPhase I


9

Deliverables and

Milestones

2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48

Block 4:Framework and Architecture

Block 5:Management and Outreach

Arch v0 Arch v1 Arch v2 FW3 + Arch v3FW 0 FW 1 FW 2

White Paper v1 White Paper v2 White Paper v3

Periodic Reports Periodic Reports Periodic Reports Final Report

Web pages

Block 1:Requirements andEvaluation

Evaluation 1 Evaluation 2 Evaluation 4Evaluation 3 Evaluation 5

Requirements v0 Req v1 Req v2 Req v3

Block 2:Application Prototypes Initial

ApplicationPrototypes

FinalApplicationPrototypes

Block 3:Mechanisms Research andDevelopment

IntegratedPrototype v1

Prototypes v0

IntegratedPrototype v2

Final Integrated Prototype v3

Research v0

Research v1

Research v2Research v3

Tutorial v0 Tutorial v1 Tutorial v2 Tutorial v3

HCI Guidance HCI Guidance

2 43 5 6 8

Phase II Phase III Phase IV Phase VPhase I

1 7


10

Activity 2: Socio-economic requirements and evaluationProblem statement, objectives, mission: The success of the PRIME solutions will ultimately stand or fall with its adoption in

European society. Despite rapid advances in cryptographic research, privacy-enhancing technologies in general have yet to achieve widespread acceptance. Activity 2 therefore aims to detect the social and economic requirements for adoption of the privacy-enhancing concepts and technologies that are developed by PRIME, as well as other existing privacy-enhancing concepts and technologies at an early stage in the design process. In reference to the established social and economic requirements, it will evaluate criteria for widespread acceptance of the PRIME solutions in Europe.

Approach: In order to establish the social requirements to be taken into account in developing and using PRIME technology, experiences and attitudes of users of applications in which privacy-enhancing concepts and technologies are used, are explored. Particular attention will be given to application areas in which sensitive personal data are dealt with, such as healthcare and e-government. Because the establishment of trust within an electronic environment requires consideration of the differences in socio-cultural backgrounds of users and informational relationships between different parties and application areas, social conditions for the acceptance of the PRIME technology in different parts of Europe are investigated. Using the relevant social requirements, social input will be provided for the selection and development of application prototypes. Furthermore, results of social requirements research will serve as a frame of reference for evaluating the privacy-enhancing concepts and technologies that are developed by PRIME.

To be able to detect the economic requirements for widespread acceptance of the PRIME solutions, the economic disincentives within the current environment for privacy enhancing identity management solutions are explored, with a view towards recommending economic incentives to alleviate the barriers to adoption of PRIME technology. The privacy-enhancing concepts and technologies that are developed by PRIME will be evaluated with reference to the relevant economic requirements. Business and economic input will be provided to identify applications with realistic and convincing business models for privacy enhancing identity management solutions.

Research challenges: The objective of this activity is to promote the social and economic adoption of PRIME technology in different application areas throughout Europe. To carry out this objective, established economic theory will be applied in the emerging field of online privacy-enhancing identity management. No large-scale original social research, such as user surveys will be performed, but social empirical knowledge will be collected by means of qualitative, primary and secondary research methods. In order to address socio-cultural differences in privacy-enhancing identity management issues throughout Europe, social and economic domain expertise from different parts of Europe will be brought together on several occasions during the project.


11

WP 2.2 Economic Requirements and EvaluationWork package number 2.2 Start date or starting event: Phase II startParticipant id 17Person-months per participant: 11.5ObjectivesThis WP elicits the economic requirements for privacy-enhancing identity management. It investigates theeconomic disincentives within the current environment for privacy enhancing technologies and identitymanagement systems and recommends economic incentives for the privacy enhancing concepts andtechnologies developed within PRIME. It evaluates the results of the other WPs and provides inputs andguidance to them w.r.t. the economic environment.Description of work- Examines the private and social costs of adopting privacy-enhancing technologies and practices.- Identifies the economic and commercial obstacles that hinder the adoption of privacy-enhancingidentity management technologies.- Explores and recommends strategies to stimulate the adoption of PIM by commercial players andconsumers.- Evaluates prototypes using economic criteria identified above.- Cooperates with WP3.1 on business models.- Contributes to Tutorials and White Paper V1.- Contributes to development of PRIME Framework.Deliverables- D1.1.a (Requirements V0)- D6.1.b (Evaluation of early prototypes (D[5-12].1.a))- D1.1b (Requirements V1)- D6.1.d (Evaluation of integrated prototype (D11.2.a))


12

WP 2.2 Phase III Workplan

prime economics wp sub-contractors meeting thursday 16th december, 2004 21.00 – 21.30 in den...

Documents