Personal Information Security Research Articles

A Study on the Implications of China’s Personal Information Protection Act on Chinese and Korean Businesses

Purpose – This paper discusses the legislative process and necessity of China’s Personal Information Protection Law, examines the main contents of China’s Personal Information Protection Law, and studies its impact on Chinese and Korean enterprises. Thus, China’s future data protection legal system can be better understood.
 Design/Methodology/Approach – In October 2020, China convened the 13th National People’s Congress to deliberate and promulgate the draft Personal Information Protection Law of the People’s Republic of China 2020.
 The draft privacy law is China’s first specialized legislation on personal information protection, drawing global attention. Furthermore, president Xi Jinping made clear his commitment to protecting personal information by reiterating the need for “cyber security and personal information security for people” and “protecting their legitimate rights and interests in cyberspace” after the 2019 National Cyber Week. The Personal Information Protection Act of China was enacted on November 1, 2021, as personal information protection was also a real concern among the Chinese people in the highly information-oriented era.
 Findings – China already has an independent and unified Personal Information Protection Act, which officially promulgates and enforces the Personal Information Protection Act this year following cybersecurity, cybersecurity, and criminal law provisions. Furthermore, in October 2020, China began a full-fledged legislative process by releasing a draft Personal Information Protection Act and collecting opinions.
 Research Implications – China’s Personal Information Protection Act is expected to play an important role for Chinese companies and Korean companies with subsidiaries in China due to offshore applications. Therefore, it is necessary to continue to pay attention to the revision and enforcement rules of the Personal Information Protection Act so that Chinese and Korean companies can respond quickly after it is promulgated and enforced. Therefore, this paper summarizes the background of China’s Personal Information Protection Act and the main contents of the 2021 edition of the Personal Information Protection Act.

STOSOWANIE RODO W ZAKRESIE SZTUCZNEJ INTELIGENCJI I WYNIKAJĄCE Z TEGO ZAGROŻENIA DLA BEZPIECZEŃSTWA INFORMACYJNEGO PAŃSTWA

Both national security and information security are closely associated with and connected to the emerging field of artificial intelligence. In this regard, following the presumed axioms of the anticipated proliferation of AI systems within modern society and its expected widespread implementation in vital public and private institutions and furthermore the extensive application of AI systems within personal data processing, possible threats to national and information security within the European Union - with an emphasis on Poland and the Polish legal system – are explored. On the basis of an overview of the theoretical basis of the concepts of national and information security and artificial intelligence, the emergence of AI within personal data processing in the context of the GDPR legal framework is discussed. At least one potential conflict between the implications of the hypothetical scenario of the emergence of the so-called strong form of artificial intelligence and both the Polish data privacy legal framework (based, inter alia, on the GDPR) and the Polish information security is being identified in this context. The academic article draws the conclusion that the emergence of so-called “strong AI” may lead to a number of real and probable threats to the system of personal data protection and information security in Poland (and possibly in other EU Member States as well). The paper finally concludes by outlining and discussing the negative impact of the identified conflict, in particular on Polish information security, and calls for efforts to address these issues in future studies in the academic literature.

WeChat's Effect on Online Purchase Intention of Fast Moving Consumer Goods

The purpose of this study is to explore WeChat's effect on Fast Moving Consumer Goods (FMCG) online purchase intention among Chinese people in New Zealand. In this study, a quantitative research method is employed to collect primary data through an online survey with a questionnaire from 139 respondents in New Zealand. The findings reveal that WeChat is widely used by Chinese in New Zealand; with more than half of the respondents were using WeChat’s online shopping function. The WeChat users are mostly young people. When using WeChat to purchase, users in New Zealand are concerned about the interface on WeChat shopping, the recommendation of WeChat, the security and confidentiality of personal information on WeChat. These factors are highly correlated with online purchase intention. WeChat users agreed that WeChat is convenient, easy to use payment method. These two parameters are highly correlated with online purchase intention. On the contrary, WeChat users do not agree with product information, and other unfamiliar customers’ recommendation to buy FMCG through WeChat.

IdentityDP: Differential private identification protection for face images

Because of the explosive growth of face photos as well as their widespread dissemination and easy accessibility in social media, the security and privacy of personal identity information become an unprecedented challenge. Meanwhile, the convenience brought by advanced identity-agnostic computer vision technologies is attractive. Therefore, it is important to use face images while taking careful consideration in protecting people’s identities. Given a face image, face de-identification, also known as face anonymization, refers to generating another image with similar appearance and the same background, while the real identity is hidden. Although extensive efforts have been made, existing face de-identification techniques are either insufficient in photo-reality or incapable of well-balancing privacy and utility. In this paper, we focus on tackling these challenges to improve face de-identification. We propose IdentityDP, a face anonymization framework that combines a data-driven deep neural network with a differential privacy (DP) mechanism. This framework encompasses three stages: facial representations disentanglement, ∊-IdentityDP perturbation and image reconstruction. Our model can effectively obfuscate the identity-related information of faces, preserve significant visual similarity, and generate high-quality images that can be used for identity-agnostic computer vision tasks, such as detection, tracking, etc. Different from the previous methods, we can adjust the balance of privacy and utility through the privacy budget according to practical demands and provide a diversity of results without pre-annotations. Extensive experiments demonstrate the effectiveness and generalization ability of our proposed anonymization framework.

Countermeasure of Telecom Network Fraud Investigation Based on Big Data

With the diversification of information data in the information age of big data and the integration of network technology and the development of different industries, criminals who carry out telecommunication fraud are also using the technical loopholes existing in the process of integration of big data with different industries as an opportunity to commit crimes. This paper studies the investigation process and countermeasures of telecom network fraud through big data technology. This paper first introduces the characteristics of big data, analyzes the challenge of personal information security under the background of big data, warns people to protect their personal information in the era of big data, puts forward the clustering algorithm based on big data, introduces the concrete steps based on big data clustering algorithm, and then puts forward the specific steps of big data clustering algorithm. The current situation of telecom network fraud is analyzed, and the telecommunication network fraud is clustered based on big data. The experimental results show that, based on the clustering analysis of telecommunication network fraud based on big data, it is found that through the information age of big data, as long as big data are used rationally, it can effectively suppress telecommunications fraud and reduce it by 80%.

Digital Forensic Analysis to Improve User Privacy on Android.

The Android platform accounts for 85% of the global smartphone operating-system market share, and recently, it has also been installed on Internet-of-Things (IoT) devices such as wearable devices and vehicles. These Android-based devices store various personal information such as user IDs, addresses, and payment information and device usage data when providing convenient functions to users. Insufficient security for the management and deletion of data stored in the device can lead to various cyber security threats such as personal information leakage and identity theft. Therefore, research on the protection of personal information stored in the device is very important. However, there is a limitation that the current research for protection of personal information on the existing Android platform was only conducted on Android platform 6 or lower. In this paper, we analyze the deleted data remaining on the device and the possibility of recovery to improve user privacy for smartphones using Android platforms 9 and 10. The deleted data analysis is performed based on three data deletion scenarios: data deletion using the app’s own function, data deletion using the system app’s data and cache deletion function, and uninstallation of installed apps. It demonstrates the potential user privacy problems that can occur when using Android platforms 9 and 10 due to the leakage of recovered data. It also highlights the need for improving the security of personal user information by erasing the traces of deleted data that remain in the journal area and directory entry area of the filesystem used in Android platforms 9 and 10.

Prospects of E-Commerce Innovation in Increasing Students Consumer Trust

Various innovations have been made to solve problems in increasing consumer confidence to shop safely on e-commerce portals. This study aims to determine the level of consumer confidence in the e-commerce innovation model, as well as to explore the academic point of view. The study used a descriptive approach. The number of respondents in this study was 61 respondents for Students consumers, and 3 explanations from the perspective of academics. The results of the study show various problems that are often experienced by consumers and make consumer confidence relatively low, including; the first is the issue of personal information security, and the second is the issue of conformity with consumer expectations. Consumers believe that buying and selling online increases their shopping effectiveness. In addition, consumers perceive that the presence of an e-commerce portal provides great benefits for the ease of finding goods and services that consumers need. The tendency of consumers to shop online in the future will continue to increase, but consumers have not fully demonstrated the belief that mainstream online buying and selling in the future is more desirable than shopping in shopping centers

Research on Legal Protection of Consumers’ Personal Information From the Perspective of Public Interest Litigation

In the era of big data, consumers’ personal information security is facing severe challenges and risks. Therefore, it is urgent and important to strengthen the protection of consumers’ personal information. In the personal information leakage incident of consumers, the victims are unspecified groups, and the number of consumers who have suffered losses and the actual losses of ordinary consumers is uncertain. By filing consumer civil public interest litigation, consumers can be effectively encouraged to defend their rights through litigation, which increases the cost of offense and avails the prevention of illegal behaviors. However, there are still many problems in public interest litigation of consumers’ personal information protection. Firstly, it is difficult to distinguish the subject of infringement and its internal responsibility allocation. Secondly, the level of evidence collection means of procuratorial organs can’t match the needs of the investigation, which disadvantages prosecutors compared with the powerful objects of evidence collection. Thirdly, the problems of jurisdiction confirmation and low efficiency on the referral of jurisdiction have not been solved. Fourthly, the overlapping of laws has caused the judge’s discretion to be too wide. Fifthly, the standard of remedies for infringement is unclear. Based on those above, this paper puts forward some suggestions on public interest litigation of consumers’ personal information from five aspects: positioning the subject of infringement, standardizing jurisdiction, strengthening investigation and evidence collection, perfecting legal responsibility and clarifying the application of law.

Efficient Generation of Cancelable Face Templates Based on Quantum Image Hilbert Permutation

The pivotal need to identify people requires efficient and robust schemes to guarantee high levels of personal information security. This paper introduces an encryption algorithm to generate cancelable face templates based on quantum image Hilbert permutation. The objective is to provide sufficient distortion of human facial biometrics to be stored in a database for authentication requirements through encryption. The strength of the proposed Cancelable Biometric (CB) scheme is guaranteed through the ability to generate cancelable face templates by performing the scrambling operation of the face biometrics after addition of a noise mask with a pre-specified variance and an initial seed. Generating the cancelable templates depends on a strategy with three basic steps: Initialization, Odd module, and Even module. Notably, the proposed scheme achieves high recognition rates based on the Area under the Receiver Operating Characteristic (AROC) curve, with a value up to 99.51%. Furthermore, comparisons with the state-of-the-art schemes for cancelable face recognition are performed to validate the proposed scheme.

Evaluating Dynamic Tor Onion Services for Privacy Preserving Distributed Digital Identity Systems

Digital identity documents provide several key benefits over physical ones. They can be created more easily, incur less costs, improve usability and can be updated if necessary. However, the deployment of digital identity systems does come with several challenges regarding both security and privacy of personal information. In this paper, we highlight one challenge that digital identity systems face if they are set up in a distributed fashion: Network Unlinkability. We discuss why network unlinkability is so critical for a distributed digital identity system that wants to protect the privacy of its users and present a specific definition of unlinkability for our use-case. Based on this definition, we propose a scheme that utilizes the Tor network to achieve the required level of unlinkability by dynamically creating onion services and evaluate the feasibility of our approach by measuring the deployment times of onion services.

Aligning South African Data and Cloud Policy with the PoPI Act

On 1 April 2021, the South African government released the Draft National Data and Cloud Policy for public comment. This policy aims to support the digital economy in South Africa by implementing initiatives to augment the development of digital infrastructure and skills, with a specific focus on cloud computing. The adoption of the policy would help position the country as a data-driven economy. However, the implementation of such a policy is predicated on the existence of supporting digital infrastructure and aligned inter-departmental goals. Currently, there are many technological and legal considerations that must be addressed in order for such a policy to be implemented successfully. One particularly important consideration is how this policy relates to South Africa’s Protection of Personal Information Act, which came into effect on 1 July 2021. The Act sets out legal imperatives for the collection, storage and use of personal information belonging to South African citizens. The aim of this paper is to analyze how the Draft National Data and Cloud Policy relates to the Protection of Personal Information Act in terms of what is proposed in the Policy and what is legislatively imperative in the Act. The overarching context for this evaluation is data governance in the cloud with an emphasis on the security of personal information. Macroeconomic threats and a shortage of critical ICT skills presupposes technical challenges for the implementation of a cloud service. Formal Concept Analysis is utilized to conceptualize and understand the relationships between the Draft National Data and Cloud Policy and the Protection of Personal Information Act. Classification, Confidentiality and Open Data are presented as technological challenges to cloud implementation. This paper aims to contribute towards an understanding of these challenges and how they are affected by South Africa’s legislation and policies. We therefore investigate how the Draft National Data and Cloud Policy is situated in the broader context of data protection in South Africa.

End-of-Use vs. End-of-Life: When Do Consumer Electronics Become Waste?

This study focuses on the lifespan of consumer electronics. The article reviews end-of-life terminology in scientific literature and suggests distinguishing end-of-use and end-of-life stages. The question, when electronics become waste, is approached using the concept of a system called PSSP language, which classifies artefacts based on their attributes of purpose, structure, state and performance. It is highlighted that waste as a concept is dynamic; the same thing can be waste or non-waste at different times and places and for different people. Further, the article reviews the impact of storage behavior on the realization of the waste hierarchy, using mobile phones as a case study. Evidence suggests that over half of customers use their mobile phones for only two years, and there is little incentive to keep them in use longer. Surveys also indicate that over half of the customers do not return their phones for reuse or recycling but keep them at home. The article suggests that the three key factors, promoting the storing of an old phone, are the shortness of usage time, perceived residual value of replaced equipment and concerns of personal information security. It is also indicated that memories and the personal attachment to the device contribute to consumers’ storage decision. It is concluded that, to prolong the use of mobile phones, there is a demand for changing consumers attitudes towards the return of electronics for reuse and repair to be more positive.

FAKE NEWS PHENOMENON IN CONTEXT ENSURING INFORMATION SECURITY OF THE STATE

An article devoted to the study of the main points of using "fake news" for manipulations of the mass consciousness for the purpose of informational and psychological influence. "Fake news" is seen as a covert influence. Information intrusion, manipulation, and the use of socio-psychological influence are a serious threat to both the basic principles of a democratic society and the personal information and psychological security of citizens. The purpose of this study is to analyze the types of "fake news" and ways to overcome them to ensure information security of the state.

PERSONAL INFORMATION SECURITY: FACTORS OF HOMEOSTASIS

The problem of homeostasis of personal information security in modern society is considered. The factors influencing the state and trends of personal information security have been investigated. Factors for homeostasis of personal information security have been determined. The directions of activities to ensure homeostasis of information security of an individual in the modern conditions of the Ukrainian society are substantiated.

Penyebaran Link Phising Kuota Kemendikbud Terhadap Kesadaran Informasi Pribadi Di Kalangan Mahasiswa UNINUS

Hoaxes are becoming one of the things that are increasingly found in todays digital era. The types of hoaxes circulating in the community are also very diverse, one of which is the Ministry of Education and Culture quota phishing link hoax. This hoax is targeting the personal data of students and people who need internet quota during this pandemic. For this reason, we want to find out how aware Uninus students are about the importance of personal data security. This study uses descriptive approach, and data collection technique is through interviews and questionnaires. This type of research data is primary data, and the research subjects are Uninus students. The object of this research is the awareness of Uninus students towards personal information, the informants are class A students of the Communication Studies study program. As a result, the informants admitted that they had received phishing links from the Ministry of Education and Culture quota and knew that phishing links could threaten personal data and could also cause material and non-material losses. They also know the steps to avoid becoming a victim of phishing links and the informants admitted that they are very aware of the importance of personal information security.

Тенденции цифровизации банковской сферы: международный аспект

The study analyzes the main features of the use of digital technologies in the financial and banking sector at the international level. In the paper, we can conclude: the customer's digital identifier is the main attribute when using technology platforms in the banking sector; the norms on personal data protection and information security requirements should apply to the customer's digital identifier; since the digital identifier is analogous to a passport, we can say that the digital identifier can contain more information about an individual and allows to participate in digital civil turnover. The study proposes a method for assessing the degree of digitization of banks by the level of automation of key processes; by the number of online services provided; by the speed of transactions; by the availability of online services around the clock; by the range of digital technologies used; by the volume of online sales and the volume of transactions carried out using digital technologies.

Factors affecting the perception of students at the University of Social Sciences and Humanities, Vietnam National University Ho Chi Minh City, on the issue of personal information security

Thanks to the trend of digital transformation and the promotion of people’s legitimate rights and interests, personal information security has grown in importance in the society. Against such context, everyone, especially students, who are a valuable human resource in the age of science and technology, should be aware of the issues related to personal information security. The purpose of this study is to identify factors that influence students’ perceptions at the University of Social Sciences and Humanities, Vietnam National University Ho Chi Minh City, on personal information security. Data were gathered through a questionnaire survey of 392 students and interviews with four students from various faculties and academic years at the University of Social Sciences and Humanities, Vietnam National University Ho Chi Minh City. The study identified 12 factors that influence students’ perceptions of personal information security namely (1) information technology skills, (2) personality traits, (3) attitude, (4) experience, (5) knowledge, (6) work environment, (7) friends, (8) social networks, (9) habits, (10) environment life, (11) education level, and (12) types of personal information in possession. From the findings, some recommendations regarding students’ perception of personal information security are presented.

A novel application on mutually orthogonal graph squares and graph-orthogonal arrays

<abstract> <p>Security of personal information has become a major concern due to the increasing use of the Internet by individuals in the digital world. The main purpose here is to prevent an unauthorized person from gaining access to confidential information. The solution to such a problem is by authentication of users. Authentication has a very important role in achieving security. Mutually orthogonal graph squares (MOGS) are considered the generalization of mutually orthogonal Latin squares (MOLS). Also, MOGS are generated from edge decompositions of complete bipartite graphs by isomorphic graphs. Graph-orthogonal arrays can be constructed by MOGS. In this paper, graph-orthogonal arrays are used for constructing authentication codes. These arrays are the encoding matrices of authentication tags. We introduce the concepts and basic theorems of MOGS, graph-orthogonal arrays, and authentication codes. After constructing graph-orthogonal arrays by MOGS, then there is an established mapping between graph-orthogonal arrays and message set. This manages us to construct perfect non-splitting and splitting Cartesian authentication codes. In both cases, we calculate the probabilities of successful impersonation attacks and substitution attacks. Besides that, the performance of constructed non-splitting and splitting authentication codes is analyzed. In the end, optimal authentication codes and secure authentication codes are constructed.</p> </abstract>

Модернізація кримінально-правової охорони інформаційного простору України

The article notes that when intensive work on the new Criminal Code of Ukraine continues, the question arises aboutthe conceptual model of criminal law protection of information space, which will be taken into account when streamliningthe rules of criminal liability for offenses. In this regard, the need to create a clear and consistent conceptual model ofcriminal law protection of the information space of the Ukrainian state is justified. It is emphasized that the peculiarityof the current approach to the protection of information relations is that the relevant rules are contained in fact in differentsections of the Special Part of the Criminal Code of Ukraine. This situation cannot be considered satisfactory. Thus, it istime to modernize the existing model of protection of these relations. Modernization of protection of information spaceby means of criminal law should be based on certain principles, such as: 1) combination in one section of the SpecialPart of the Criminal Code of acts that may harm the information space to person, society, state; 2) protection of theinformation space, but not of individual information relations; 3) ensuring normal and secure information interactionbetween individuals, society and the state in various combinations; 4) filling the content of information space protectionwith security measurement. Due to the modernization of information space protection, a joint «platform» will be createdto protect relevant public relations in the form of a single section of the Special Part of the Criminal Code of Ukraineentitled «Criminal offenses against information security of person, society, state» that in one way or another affect thesphere of information space.

Cyber (In)security of Personal Data and Information in Times of Digitization

In an employment relationship, work and pay are no longer the only important aspects, as importance is increasingly shifting toward obligations concerning the protection of personal data and privacy arising from the prohibition of causing harm to the employer and the duty of loyalty to the employer. The article deals with the constitutionally protected right to privacy and the protection of personal data from the point of view of ensuring cyber security at the employer. The employer is obligated to protect the right to privacy by legal provisions, whereas from the point of view of ensuring the protection of privacy and information, the employer must protect, first and foremost, the personal data of employees. The main purpose of the legal protection of personal data is the lawful and fair processing of the personal data of individuals. Employers are thus facing an increasing number of risks related to the safety of employees and the security of business processes, and it is therefore important to establish comprehensive corporate security to ensure adequate security across all levels.