Extensible privacy framework for Web of objects based ubiquitous services

Abstract

The paper presents an extensible privacy framework for Personal Identifiable Information (PII) in Web of Objects (WoO) based ubiquitous services. WoO enables every physical object, communication and web connectivity to produce and consume the information. WoO based ubiquitous services provides efficient control management of smart devices from anywhere and at anytime. The ubiquitous and pervasive services attract users to improve the comfort level of their daily lives, but meanwhile the environment is highly prone to the leakage and breaches of user PII. The paper proposes extensible, interoperable and flexible privacy framework architecture of WoO based ubiquitous services to control the release of user PII to other users and 3rd party service providers. We suggest PII ontology for dynamic adaptation of user PII, privacy settings ontology for extensibility and flexibility of user privacy settings control, and eXtensible Access Control Markup Language (XACML) based privacy policies and consent management to provide the interoperability among different vendors. Furthermore, the architecture is based on REST for lightweight and high performance. We also present the service scenarios of user PII collection, and disclosing to another user or 3rd party service providers.