Store Personal Information Research Articles

Perceptions of Alerts Issued by Social Media Platforms in Response to Self-injury Posts Among Latinx Adolescents: Qualitative Analysis.

BackgroundThere is growing interest in using social media data to detect and address nonsuicidal self-injury (NSSI) among adolescents. Adolescents often do not seek clinical help for NSSI and may adopt strategies to obscure detection; therefore, social media platforms may be able to facilitate early detection and treatment by using machine learning models to screen posts for harmful content and subsequently alert adults. However, such efforts have raised privacy and ethical concerns among health researchers. Little is currently known about how adolescents perceive these efforts.ObjectiveThe aim of this study is to examine perceptions of automated alerts for NSSI posts on social media among Latinx adolescents, who are at risk for NSSI yet are underrepresented in both NSSI and health informatics research. In addition, we considered their perspectives on preferred recipients of automated alerts.MethodsWe conducted semistructured, qualitative interviews with 42 Latinx adolescents between the ages of 13 and 17 years who were recruited from a nonprofit organization serving the Latinx community in Milwaukee, Wisconsin. The Latinx population in Milwaukee is largely of Mexican descent. All interviews were conducted between June and July 2019. Transcripts were analyzed using framework analysis to discern their perceptions of automated alerts sent by social media platforms and potential alert recipients.ResultsParticipants felt that automated alerts would make adolescents safer and expedite aid before the situation escalated. However, some worried that hyperbolic statements would generate false alerts and instigate conflicts. Interviews revealed strong opinions about ideal alert recipients. Parents were most commonly endorsed, but support was conditional on perceptions that the parent would respond appropriately. Emergency services were judged as safer but inappropriate for situations considered lower risk. Alerts sent to school staff generated the strongest privacy concerns. Altogether, the preferred alert recipients varied by individual adolescents and perceived risks in the situation. None raised ethical concerns about the collection, analysis, or storage of personal information regarding their mental health status.ConclusionsOverall, Latinx adolescents expressed broad support for automated alerts for NSSI on social media, which indicates opportunities to address NSSI. However, these efforts should be co-constructed with adolescents to ensure that preferences and needs are met, as well as embedded within broader approaches for addressing structural and cultural barriers to care.

Development of a Secure Website to Facilitate Information Sharing in Families at High Risk of Bowel Cancer-The Familyweb Study.

Simple SummaryFamilies with an inherited high risk of bowel cancer may struggle to share information about their diagnosis. This means that relatives are not always aware of their increased risk of cancer or able to access screening for the early detection of cancer. Through this study, we aimed to help such families by creating a website where patients could share confidential information with their relatives securely online. Following a survey and telephone interviews with affected individuals, the content of the website was developed to suit the needs of families. Website function was tested with patients to check feasibility and acceptability. Most participants wanted more information to support their adaptation to the diagnosis and help inform their relatives. This study demonstrates how health professionals can improve access to genetic testing and cancer screening in families at high risk of cancer, thus reducing morbidity and mortality.Individuals with pathogenic variants in genes predisposing to bowel cancer are encouraged to share this information within their families. Close relatives at 50% risk can have access to bowel cancer surveillance. However, many relatives remain unaware of their vulnerability or have insufficient information. We investigated the feasibility and acceptability of using a secure website to support information sharing within families at high risk of bowel cancer. Patients (n = 286) answered an anonymous cross-sectional survey, with 14 participating in telephone interviews. They reported that the diagnosis had a profound effect on them and their family relationships, and consequently desired more support from health professionals. Website content was created in response to the preferences of survey and interview participants. Reactions to the website from 12 volunteers were captured through remote usability testing to guide further refinement of the website. Participants welcomed the opportunity to store and share personal information via the website and wanted more information and help informing their relatives about the diagnosis. Important website topics were: healthy lifestyle; genetic testing; and how to talk to children about the diagnosis. A website providing online access to confidential documents was both feasible and acceptable and could translate into increased uptake of cancer surveillance, resulting in lower morbidity and mortality in these families.

Biotechnologies, Birth and the Right to Know One’s Genetic Origins

The aim of this paper is to investigate whether the right to know one’s genetic origins (RKGO) encounters significant differences in the level of guarantee when it applies to adoption, to assisted reproduction or to surrogacy. The results of this analysis are aimed at understanding the degree of effectiveness of this right in different legal systems. To this end, the main features of the right to know one’s genetic origins are carefully considered, the research being based both on legislative and on jurisdictional materials. Namely, the essay focuses on information and consent, on the structure of relevant regulation in the balance between collection and storage of personal information or protection of anonymity and privacy and, finally, on the most crucial factor for the enforcement of this right, namely time.

Forensic analysis of instant messaging apps: Decrypting Wickr and private text messaging data

Currently, obtaining digital evidence from instant messaging (IM) apps is being considered. IM apps store personal user data, e.g., user information, chat messages, and multimedia files, most IM apps protect the stored data using secure cryptographic algorithms such that only an authorized person can access the app data. Accordingly, it is important to develop a decryption method for IM app data for digital forensic investigations. In this paper, we present how the database and main files of IM apps are stored and encrypted, as well as how the apps verify passwords. We also present a decryption methodology for the databases and multimedia files of two IM apps, i.e., Wickr and Private Text Messaging, which provide various secure communications, e.g., text messages and multimedia files. The decrypted data of these IM apps was verified in simulations.

Students’ perceptions of an e-commerce app

Varsity Vibe is South Africa’s first student discount application. It is available to students from the age of 18 to 25. To use Varsity Vibe, a student needs to be registered subscriber by paying the subscription fee unless you have a student achiever account with Standard Bank then subscription is free. Varsity Vibe consists of coupons from various stores across South Africa, these coupons can be redeemed by students when making an online purchase from the stores that are located on the Varsity Vibe authorised master file. The study aims to determine the University of KwaZulu-Natal (UKZN) Westville Campus students perceived use of using this e-commerce based application, Varsity Vibe. The research analysed the factors related to why students use Varsity Vibe, what they use Varsity Vibe to purchase, and the impact it has on their spending. A sample of 120 respondents from the UKZN Westville campus was used to obtain data. Data was obtained by distributing questionnaires on campus. The results obtained from the questionnaires were analysed and the following was concluded. Respondents were aware of the Varsity Vibe app, through on campus marketing. Only 45% of the users who had downloaded the app, were actually registered users. Of the 45% of registered users, only 60% were active monthly users of the app. Redemption of vouchers was low, as the deals within the province in which they were based was limited. Usage of the app, compared to the website, was more frequent. The app was perceived to be ‘easy to use’ and ‘useful’ by even the Non-IT users. Majority of the participants felt that the app would become more popular in time especially if the voucher base could be expanded to include more local based offers and the store base could be more comprehensive. Respondents expressed concern over security issues, in particular, storage of personal information and bank details, especially in the case of where your phone is stolen or misplaced.

Cybersecurity Awareness Level: The Case of Saudi Arabia University Students

Cybersecurity plays an important role in reliance on digital equipment and programs to manage daily lives chores including the transmission and storage of personal information. Therefore, it is a global issue in our growing society, and it becomes increasingly important to measure and analyze the awareness of it. In this paper, a questionnaire has been designed to measure the current level of cybersecurity awareness (CSA) among Saudi university students. Cybersecurity students' awareness level questionnaire has been adapted from few other previous cybersecurity awareness campaigns. In this questionnaire, a total of 136 students have participated in the survey. The questionnaire was collected to measure the cybersecurity students’ awareness level through their knowledge, culture, and surrounding environment or through students’ behavior by thee affected factors. These are: gender, location, and study department of the students. The study findings reveal that the students’ awareness is in an average has no significant difference in cybersecurity awareness level between male and female students, but females show a bit more concern about cybersecurity. However, there is a clear and high awareness of students of computer and information technology departments compared to others. Moreover, urban students outperformed students in remote areas in awareness of cybersecurity. The survey results indicate that the study model has been effective in measuring students' awareness.

Searching technology for questionable records when creating the Unified registry of ukrainian individuals identification

One of the most effective solutions for protecting personal data when building a Unified Identity Registry is to share end-to-end identifier and hash codes generated from combinations of personal data using one-sided hash functions. This is due to the fact that the stage of creating a unified personal identification register does not involve the use of open personal data and therefore no personal data is allowed on the server and only unique identifiers and hash codes are allowed. In accordance with the principles of creating the above registry, five required and fifteen optional types of personal data stored in the registry were analyzed and used to generate hash codes, as well as possible combinations of personal data fields (ten different combinations of personal data were used in the work) data) built on the types specified. The technology of end-to-end identification has been developed, which has the ability to track errors in the fields with personal data when entering new data and when searching the registry. For the evaluation of the proposed technology, 100,000 simulated individuals were selected with random errors in the appropriate fields that store personal data. These errors are randomly placed in the fields of the created registry database that store personal information of the required and optional types. The efficiency of the proposed technology has also been verified by registering new persons in the registry. The proposed technology has a high tolerance for errors and can correctly identify and associate an individual, even with errors in multiple fields of personal data. Correct personal data, especially in the fields of the database with mandatory personal data, is crucial to avoid erroneous entries in the created registry. In the context of one-sided hash transformation, a doubtful record with personal data can be identified by applying hash operators based on hash codes calculated according to certain combinations of personal data.

Informed consent for whole blood donation.

It is recognized that blood transfusion services have an ethical duty to obtain informed consent from their voluntary, non-remunerated donors. This right was most recently affirmed by the 2017 revision of the International Society of Blood Transfusion (ISBT) Code of Ethics. However, the constituent elements necessary to adequately inform such consent have not been definitively established. This review evaluates the historical background to informed consent in medicine and as it has been applied to blood donation. The question of what information should be disclosed is then considered with regard to existing statutory requirements in both the United States and EU as well guidance from relevant international organizations. The emerging ethical issues around repurposing of donated blood for sale as recovered plasma and use in research are included in this analysis. A reasonable basis is found in the literature to advocate that valid informed consent of blood donors should encompass: the donation process itself and potential adverse effects, the need for pre-donation transfusion-transmissible infection (TTI) screening, potential non-transfusion uses of derived products, requirements to obtain and store personal information, the consequences that non-disclosure of such information may have for both the donor and the recipient and reassurance as to the confidentiality of this information. Informed consent is a key component of the duty of care between a blood service and its donor. We identify essential elements that should be present for such consent to be considered valid.

Multi-Level Security in Healthcare Using a Lattice-Based Access Control Model

Controlling access to sensitive personal information is a primary concern in healthcare. Regardless of whether access control policies are determined by patients, healthcare professionals, institutions, legal and regulatory authorities, or some combination of these, assuring the strict enforcement of policies across all systems that store personal health information is the overriding, essential goal of any healthcare security solution. While a comprehensive healthcare security architecture may need to impose specific controls on individual data items, most access control decisions will be based on sensitivity levels automatically assigned to information classes by a “sensitivity profile,” combined with the authorization level of the user. This article proposes the use of multi-level security, defined by lattice-based sensitivity profiles, to ensure compliance with data access restrictions between systems. This security approach accommodates the complexities needed for health data access and benefits from existing, proven tools that are used for defense and national security applications.

Distributed Networks "Blockchain": Environmental Risks and Threats

The possibilities of using distributed "blockchain" networks not only in financial transactions of crypto-currencies, but in a wide range of information messages and for storing confidential information from unidentified third parties are discussed. The positive economic and social possibility of using distributed encrypted networks on the Internet is shown to preserve personal freedom of action and new opportunities for personal business. At the same time, it is shown that the world wide web of Internet networks carries new threats and risks in life activity associated with hiding the true faces of the participants in the common network and the existing, despite the encryption, the possibility of information leakage, its irrecovecability in the event of a misstatement. Particularly noted is the general problem of the dependence of the digital technology and technology used in Russia on the overwhelming borrowing of the electronic database. A warning is given to users who do not have special knowledge and means of protection, with widespread use of blockchain technology in business, financial activity, and personal information storage.

Sharing and storage behavior via cloud computing: Security and privacy in research and practice

Cloud computing services (CCS) has altered information sharing and storage behavior. This study investigates this behavior and explores the paradox between industry reports and the academic CCS adoption literature. The majority of the academic literature shows that security and privacy beliefs are the major hindrances to wide adoption of CCS whilst multiple recent industrial reports state that security and privacy issues are no longer impediments to the use of CCS. The extensive sharing and storage of personal information among CCS regardless of any security and privacy concerns allows us to speculate about this paradox and provided insight for developing a cloud computing usage model. The posited model explores the influence of CCS main hindrances; that is, perceived security and perceived privacy, compared to the main determinants of technology adoption. The data was collected from 129 working professionals using a survey-based methodology. Contrary to the academic literature, the obtained results confirmed the hypotheses that cloud security and privacy concerns are not significant influences on information sharing and storage behavior. Peers influence was found a significant determinant of the behavior. The study contributes to the information systems and cloud computing literature and supports that the technology is perceived as able to protect user information. The analysis of the developed model provides multiple implications for researchers in academia and industry.

Email Confidentiality or Waiver of Privilege?

Electronic mail communications are a fact of life in 2017. There is no getting around this benefit and burden. Yet careless use of email devices and networks can risk loss of confidentiality and other privileges. This is especially the case when clients communicate with their lawyers using their employer-established email accounts on office computers or computers they share with others, including in some cases family members. That client may also store personal emails and information on a business or shared laptop, smartphone, or tablet. In each case, these involve risks to confidentiality and any attendant privilege that may be claimed for the electronic communications. The principal of client-lawyer confidentiality found in Rule 1.6 of the Colorado Rules of Professional Conduct is given effect by related bodies of law: the attorney-client privilege, the work-product doctrine and the rule of confidentiality established in professional ethics. The lawyer’s duty of confidentiality in Rule 1.6 is much broader than either the attorney-client privilege or the work-product doctrine. The confidentiality rule, for example, applies not only to matters communicated in confidence by the client but also to all information relating to the representation, whatever its source. A lawyer may not disclose such information except as authorized or required by the Rules of Professional Conduct or other law. Careless use of email communication by the lawyer or the client can result in the loss of attorney-privilege or work product protection relating to the information contained in those emails, such as when clients are using an employer's email to conduction the conversation, or is using the employer's equipment.. The rules require that the lawyer take reasonable efforts to prevent unauthorized access or disclosure of confidential communications, including obtaining informed consent from the client to forego certain security measures - meaning that the lawyer must explain the issues to the client and obtain the client's informed consent.

Adaptive algorithms applied to accelerometer biometrics in a data stream context

The use of smartphone devices has increased over the last years, as illustrated by the growth in smartphone sales. These devices are currently used for several services, such as bank account access, social networks and storage of personal information. In view of this scenario, an important question arises: does authentication mechanisms already present in these devices provide enough security? Recently, a new authentication method, named accelerometer biometrics, has been proposed. This method allows the authentication of users using accelerometer data, which can be obtained from accelerometers usually present in modern smartphones. This is a clear advantage of this biometric modality, as there would be no additional cost with hardware. However, as a behavioral biometric technology, user models induced from accelerometer data may become outdated over time. This paper investigates the use of adaptation mechanisms to update user models in accelerometer biometrics in a data stream context. Practical issues regarding the usage of accelerometer data are also discussed.

AndroidBLP for Confidentiality Management in Android Environments

Users employ smartphones and tablets to manage and store personal information as well as corporate information. However, storing different types of information in the same device may lead to information leakage. Users need tools to define different confidentiality requirements over their data, and to enforce different access policies according to those requirements. Android is the most used mobile operating system, and although it implements various mechanisms to protect user information, it does not have any tool to meet the mentioned needs. This paper presents AndroidBLP, a tool based on the Bell-LaPadula confidentiality model that implements a predefined mandatory access control policy, enables users to define confidentiality requirements, and enforces a confidentiality policy based on those requirements.

Privacy and metadata: The hidden threat to whistle-blowers in public health systems

Summary A high quality public health system relies as much on a robust, accountable and transparent governance framework as it does on the integrity, professionalism and skill of its practitioners and administrators. Patients have an expectation, grounded in human rights entrenched in international law, to a reasonable quality of care and to not be exposed to exploitation, abuse or unreasonable risks of harm. A well-functioning public health system will deliver therapeutic outcomes accordingly, but must also provide a front-line defence for the public against communicable diseases or pandemics, and should also strive to facilitate medical research and innovation. The modern age of digitized personal health information, facilitated by rapid advances in telecommunications and computing technologies, presents both opportunities and hazards for public health systems. Digital collection of data assists healthcare providers by facilitating instant access to consolidated health records, and provides an abundance of information for epidemiologists and health economists alike. However, such systems have also exposed individuals to significant breaches of privacy, and threaten the viability of the doctor–patient relationship upon which a public health system depends. In Australia, the medical profession and healthcare consumers have voiced concerns regarding the general collection, use and secure storage of personal information, including data and metadata. Both forms of personal information have been the subject of high profile privacy breaches, raising questions about the legal protection of confidences between healthcare providers and patients, and whether surveillance of a physician's actions burdens their fidelity to patients in their care. For example, a data breach of the Red Cross Blood Service exposed the names, gender, addresses, dates of birth and responses to questions about ‘at-risk sexual behaviour’ of over half a million Australian blood donors. Regarding metadata, the tension between individual privacy and regulatory overreach is illustrated by powers previously granted under the Telecommunications (Interception and Access) Act 1979 (Cth) (commonly referred to as Australia's Metadata Retention Laws ) to the Australian Health Practitioner Regulatory Agency to examine the metadata of health practitioners under investigation, thus encompassing communication with all their patients, not simply those pertaining to a given complaint. This tension is also readily evident in the case study presented in this article of the Australian Federal Police's alleged warrantless access to a doctor's phone metadata to determine the identity of a suspected whistle-blower. In this case, an Australian doctor was being investigated on suspicion of having disclosed details without authorization pertaining to circumstances surrounding the death of an Iranian asylum seeker in August 2014 who was being held in an offshore detention centre on Manus Island. Media reports on evidence presented at the coronial inquest into the man's death in late 2016 allege that there were unreasonable delays in transporting the patient to a healthcare facility in Brisbane where he could have received life-saving treatment. While this example did not result in a prosecution, detention centre staff, including healthcare workers, who disclosed information about operations or matters within detention centres without authorization at that time, were potentially subject to a two-year jail term under the Border Force Act 2015 (Cth). As this case study illustrates, misuse of metadata for investigating and prosecuting doctors who act as whistle-blowers within the public health system is not an isolated concern and merits careful consideration. Doctors have an ethical duty to act as whistle-blowers (i.e., grounded in virtue ethics) in a range of situations, such as to report systemic failures, review clinical outcomes of both departments and individuals, or avoid catastrophic events. Indeed, whistle-blowing serves a crucial function to promote transparency of processes in health governance and thereby improve quality of care and patient safety. As such, doctors present a special case for legal protection when they act as whistle-blowers in good faith. Legal disincentives, such as punitive measures that purport to advance the aims of secrecy in government agencies, should be avoided. A failure to do so risks undermining the very foundations of the doctor–patient relationship, with consequent negative implications for patient safety and quality of care in public health systems.

금융기관 개인정보 자산 분석 자동화 시스템의 설계와 구현

One of the hottest issues of security is information leakage of financial institution. Financial institutions including commercial banks are frequently threatened by attempts of leakage through hacking and vulnerability, and this information is centered on personal information of their clients. Through this study, I found out that security managers of financial institutions are trying to prevent the leaking of private information, but in fact most of them barely know where their personal information is. Even if they know where it is and trace the data, it is often found in unexpected places. Because there is a lot of waste in time and human resources as search is done manually, we have understood that responding to IT Compliance requires a lot of effort. This study is to improve IT Compliance response and protect information leakage through monitoring PC and servers, the main storage of personal information by automated system, periodically.

Injecting Subject Policy into Access Control for Strengthening the Protection of Personal Information

To protect stored personal information, many organizations and information systems adopt the role-based access control model (RBAC) or the mandatory access control model (MAC). Although individuals want to control their personal information, an individual-needs-based access control system is difficult to adopt in the existing environment. Recent proposals have included privacy-enhancing technologies such as communication anonymizers, shared bogus online accounts, and access to personal data. However, these systems cannot satisfy users' privacy requirements. In this paper we propose two confidential access control models that apply individually established policy to existing RBAC and MAC technologies. In the SpRBAC model, a user's right to access would follow organizational policy and accessing personal information would be restricted by subject policy. In the SpMAC model, users would have to satisfy the subject policy established by the provider of information in addition to the requirements of normal MAC policy. In the proposed models, it is possible to restrict access by authorized users according to the subject policy, that is, the policy defined by the subject (or informant--the one providing the personal information), and personal information can thus be protected.

Protecting Personal Information in the Era of Identity Theft: Just how Safe is our Personal Information from Identity Thieves?

Identity theft has become one of the fastest growing white collar crimes in the world. It occurs when an individual's personal information such as inter alia his or her name, date of birth or credit card details is used by another individual to commit identity fraud. Identity theft can be committed via physical means or online. The increased use of the Internet for business and financial transactions, social networking and the storage of personal information has facilitated the work of identity thieves. Identity theft has an impact on the personal finances and emotional well-being of victims, and on the financial institutions and economies of countries. It presents challenges for law enforcement agencies and governments worldwide. This article examines how identity thieves use the personal information of individuals to commit identity fraud and theft, and looks at legislative solutions introduced in South Africa, the United States of America, the United Kingdom and India to combat identity theft crimes. The article examines measures introduced by the respective governments in these countries to counteract such crimes. Finally, the article will propose a way forward to counteract such crimes in the future. The study reveals that identity theft is a growing and evolving problem that requires a multi-faceted and multi-disciplinary approach by law enforcement agencies, businesses, individuals and collaboration between countries. It is advocated that businesses and institutions should take measures to protect personal information better and that individuals should be educated about their rights, and be vigilant and protect their personal information offline and in cyberspace.

Survey on Privacy Permission Management Approaches for Android OS Applications

Smart phones have been becoming popular and mobile users are increasingly relying on them to store and handle personal information. The intake of smart phone devices for email writing, online bank transactions growing with growth of the smartphone market and accessing other forms of sensitive content has lead to the emergence of a new and ever changing threat. However, recent studies also reveal the disturbing fact that users personal information is put at risk by smart phone applications. Existing mobile privacy approaches are having limitations in their performance in handling these privacyviolating smart phone applications. Android OS(Operating System) supports the third party software development mostly. However, many of these applications accesses private or sensitive data totally negligent which immediately leads to serious privacy concerns. To reduce this problem, the current Android permission rules are much too coarse and incomprehensible from the average users perspective. Mobile users does not understands the meaning of the permissions, so he or she must either accept all of them or waive the application. Privacy Permission Management for Android OS has becomes very important security issue as, the user has only two options when they install new applications – accept the permissions and allow the install, or reject all the terms and exit without installation. So here is the need to design system in the manner which provides security to user’s personal information leak and misuse of it should be prevented. This paper provides the study of different approaches of privacy permission management and the outline of all the studied papers.

Automatic player detection and identification for sports entertainment applications

In this paper, we develop an augmented reality sports broadcasting application for automatic detection, recognition of players during play, followed by display of personal information of players. The proposed application can be divided into four major steps. In first step, each player in the image is detected. In the second step, a face detection algorithm detects face of each player. In third step, we use a face recognition algorithm to match the faces of players with a database of players' faces which also stores personal information of each player. In step four, personal information of each player is retrieved based on the face matching result. This application can be used to show the viewers' information about players such as name of the player, sports record, age, highest score, and country of belonging. We develop this system for baseball game, however, it can be deployed in any sports where the audience can take a live video or images using smart phones. For the task of player and subsequent face detection, we use AdaBoost algorithm with haar-like features for both feature selection and classification while player face recognition system uses AdaBoost algorithm with linear discriminant analysis for feature selection and nearest neighbor classifier for classification. Detailed experiments are performed using 412 diverse images taken using a digital camera during baseball match. These images contain players in different sizes, facial expressions, lighting conditions and pose. The player and face detection accuracy is high in all situations, however, the face recognition module requires detected players' faces to be frontal or near frontal. In general, restricting the head rotation to ±30° gives a high accuracy of overall system