what is special about? bertholet · what is special about?...

2
What is SPECIAL about? We are a 3-year (January 2017–December 2019) re- search and innovaon project funded under the Hori- zon 2020 ICT-18-2016 Big Data PPP: privacy-pre- serving Big Data technologies. We address the con- flict between Big Data innovaon and privacy-aware data protecon by proposing a technical soluon that makes both of these goals realisc. It allows cizens and organisaons to share more data, while guaran- teeing data protecon and transparency. We develop technology that supports the acquision of user consent at collec- on me and the recording of both data and meta- data (consent policies, event data, context) accord- ing to legal and user-specified policies; facilitates privacy-aware, secure workflows with usage/access control and auditability to enhance transparency and compliance verificaon; demonstrates robustness in terms of performance, scalability and security; provides a dashboard with feedback and control features that makes data collecon and processing comprehensible and manageable for data subjects, controllers, and processors alike. policies payload data permissions data processors data subjects DPO data subjects legal & encrypon Compression policies policies with Persisng data: scky Policy-aware querying: Data subsets/ filtering APIs & Dashboards refers to a policy has data has a policy gives permission Ingeson The features are deployed and tested with a number of use cases reflecng real-world business scenarios. The use cases Proximus is a Belgian telecommunicaons provider of- fering telephony (landline and mobile), internet and Internet TV. Their use case foresees the creaon of a tourist recommendaon tool on the basis of customer interest profiles. The tool is aimed at visitors of the Belgian coast. Deutsche Telekom is a leading European telecommuni- caons provider and involved in the SPECIAL project with a focus at exploring various possible use cases. One of them is aimed at municipality road layout op- misaon and traffic management. Furthermore, a use case includes traffic alert informaon for customers based on their commung behaviour and other geolo- caon data. The project partner Thomson Reuters Limited (TR) lo- cated in the United Kingdom is focused on supporng Know Your Customer requirements in the financial sector. To this end, TR provides end-to-end client identy and verificaon services that enable financial instuons to fulfil their compliance and due diligence obligaons against financial crimes based e.g. on in- ternaonal and naonal an-money laundering laws and regulaons. The architecture SPECIAL uses the Big Data Europe Integrator Plaorm of the EU-funded project Big Data Eu- rope. BDE focuses on cross-community big data management and building innovave products or services with semancally interoperable, large-scale data assets. The Integrator Plaorm enables deployment of common big data technologies with minimal ef- fort and forms the basis of the SPECIAL plat- form. It does not impose any restricons on the data processing components with respect to the data being processed, how it is processed and how it is being disseminated. Within SPECIAL, this plaorm will be extended and adapted to create a system compliant with the European data protecon framework, which encompasses, e.g., the protecon of personal data by effecve access control policies.

Upload: others

Post on 17-Aug-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: What is SPECIAL about? BERTHOLET · What is SPECIAL about? Wearea3-year(January2017–December2019)re-searchandinnovationprojectfundedundertheHori-zon 2020 ICT-18-2016 Big Data PPP:

What is SPECIAL about?

We are a 3-year (January 2017–December 2019) re-

search and innovation project funded under the Hori-

zon 2020 ICT-18-2016 Big Data PPP: privacy-pre-

serving Big Data technologies. We address the con-

flict between Big Data innovation and privacy-aware

data protection by proposing a technical solution that

makes both of these goals realistic. It allows citizens

and organisations to share more data, while guaran-

teeing data protection and transparency.

We develop technology that

• supports the acquisition of user consent at collec-

tion time and the recording of both data and meta-

data (consent policies, event data, context) accord-

ing to legal and user-specified policies;

• facilitates privacy-aware, secure workflows with

usage/access control and auditability to enhance

transparency and compliance verification;

• demonstrates robustness in terms of performance,

scalability and security;

• provides a dashboard with feedback and control

features that makes data collection and processing

comprehensible and manageable for data subjects,

controllers, and processors alike.

policies

payload data

permissions

data processors

data subjects

DPO

data subjects

legal

& encryption

Compression

policies

policies with

Persisting

data: sticky

Policy-aware

querying:

Data subsets/

filtering

APIs

&

Dashboards

refers to a policy

has data

has a policy

gives permission

Ingestion

The features are deployed and tested with a number

of use cases reflecting real-world business scenarios.The use cases

Proximus is a Belgian telecommunications provider of-

fering telephony (landline and mobile), internet and

Internet TV. Their use case foresees the creation of a

tourist recommendation tool on the basis of customer

interest profiles. The tool is aimed at visitors of the

Belgian coast.

Deutsche Telekom is a leading European telecommuni-

cations provider and involved in the SPECIAL project

with a focus at exploring various possible use cases.

One of them is aimed at municipality road layout opti-

misation and traffic management. Furthermore, a use

case includes traffic alert information for customers

based on their commuting behaviour and other geolo-

cation data.

The project partner Thomson Reuters Limited (TR) lo-

cated in the United Kingdom is focused on supporting

Know Your Customer requirements in the financial

sector. To this end, TR provides end-to-end client

identity and verification services that enable financial

institutions to fulfil their compliance and due diligence

obligations against financial crimes based e.g. on in-

ternational and national anti-money laundering laws

and regulations.

The architecture

SPECIAL uses the Big Data Europe IntegratorPlatform of the EU-funded project Big Data Eu-rope. BDE focuses on cross-community big datamanagement and building innovative productsor services with semantically interoperable,large-scale data assets.

The Integrator Platform enables deployment ofcommon big data technologies with minimal ef-fort and forms the basis of the SPECIAL plat-form. It does not impose any restrictions on thedata processing components with respect to thedata being processed, how it is processed andhow it is being disseminated.

Within SPECIAL, this platform will be extendedand adapted to create a system compliant withthe European data protection framework, whichencompasses, e.g., the protection of personaldata by effective access control policies.

R mi BERTHOLET

Page 2: What is SPECIAL about? BERTHOLET · What is SPECIAL about? Wearea3-year(January2017–December2019)re-searchandinnovationprojectfundedundertheHori-zon 2020 ICT-18-2016 Big Data PPP:

The core features of SPECIAL

Our vision is to reconcile Big Data and personal data

protection via an innovative data handling solution

and a transparency framework. We develop this

technology to ease industry’s difficulties with GDPR

compliance and to enable respectful treatment of per-

sonal information. This introduces new ways of user

interaction on privacy and fosters trusted customer

relationships. Thus, we

• build a big data architecture to handle

linked data for privacy policies, as well as de-

ploy scalable, queryable encryption

• develop advanced user (data subject) inter-

action and control features

• integrate the results of the Big Data Europe

and the PrimeLife projects, while advancing the

state of the art of privacy-enhancing tech-

nologies

• include ethical principles, the EU General

Data Protection Regulation (GDPR) and the

future ePrivacy Regulation.

The SPECIAL consortium

The consortium consists of project partners from

Austria, Belgium, France, Germany, Italy and the

United Kingdom.

They bring in expertise from various fields, such as

legal, business, security, privacy, usability, big data

and semantics.

Administrative and financial coordination:

Jessica Michel

ERCIM W3C

[email protected]

Technical/scientific coordination:

Sabrina Kirrane

Vienna University of Economics and Business

[email protected]

Contact us!

[email protected]

More information at:

https://www.specialprivacy.eu/

Follow us on Twitter @specialprivacy

Use case realisation

The use cases within the SPECIAL project re-

quest voluntary, informed and unambiguous

consent from the data subjects in an easy to use

way, even on mobile devices. This involves a

Dashboard that is at all times easily accessible

to stay informed about data usage. Moreover,

the data subjects can exercise control over their

own personal information in a differentiated

manner, e.g. for several processing purposes.

R mi BERTHOLET

CeR ICT

Scalable Policy-awarE

linked data arChitecture for

prIvacy, trAnsparency and

compLiance

The project SPECIAL (Scalable Policy-awarE linked data

arChitecture for prIvacy, trAnsparency and compLiance)

has received funding from the European Union’s Horizon

2020 research and innovation programme under grant

agreement No 731601 as part of the ICT-18-2016 topic

Big data PPP: privacy-preserving big data technologies.