Lee Yong, Lee Goo Yeon
Department of Software and Security Convergence, Baewha Women's University, Seoul 03039, Korea.
Department of Computer and Communications Engineering, Kangwon National University, Chuncheon 24341, Korea.
Sensors (Basel). 2021 Nov 16;21(22):7592. doi: 10.3390/s21227592.
In recent years, as all actions of Internet users become information, the importance of personal information is emphasized, but in reality, the management of personal information is still insufficient. With the advent of the concept of sharing systems such as the sharing economy, the numbers of IoT application services (for example, a healthcare service using sharing IoT devices, or a vehicle sharing system with IoT devices) using users' personal information are increasing, but the risk of using personal information is not managed. To solve this issue, the European GDPR stipulates the content of personal information protection. In this paper, we present a method to securely manage personal information in IoT devices in IoT application environments in accordance with the GDPR. We first describe the lifecycle stages of personal information occurring in IoT application services and propose a method to securely manage personal information at each stage of the lifecycle according to the flow of personal information in IoT devices. We also evaluated the usefulness and applicability of the proposed scheme through two service scenarios. Since the proposed method satisfies the requirements for personal information management in IoT application environments, it is expected to contribute to the development of the IoT business field that handles personal information.
近年来，随着互联网用户的所有行为都成为信息，个人信息的重要性得到强调，但实际上，个人信息的管理仍显不足。随着共享经济等共享系统概念的出现，使用用户个人信息的物联网应用服务（例如，使用共享物联网设备的医疗保健服务，或配备物联网设备的车辆共享系统）数量不断增加，但个人信息使用风险却未得到管理。为解决这一问题，欧洲《通用数据保护条例》（GDPR）规定了个人信息保护的内容。在本文中，我们提出一种方法，可根据GDPR在物联网应用环境中的物联网设备中安全地管理个人信息。我们首先描述物联网应用服务中出现的个人信息的生命周期阶段，并根据个人信息在物联网设备中的流动情况，提出在生命周期的每个阶段安全管理个人信息的方法。我们还通过两个服务场景评估了所提方案的实用性和适用性。由于所提方法满足物联网应用环境中个人信息管理的要求，有望为处理个人信息的物联网业务领域的发展做出贡献。
