A manifest-based framework for organizing the management of personal data at the edge of the network

Riad Ladjel (1, 2, 3) , Nicolas Anciaux (1, 2, 3) , Philippe Pucheral (1, 2, 3) , Guillaume Scerri (1, 2, 3)

1 PETRUS - Personal Trusted cloud
2 DAVID - Données et algorithmes pour une ville intelligente et durable - DAVID
3 UVSQ - Université de Versailles Saint-Quentin-en-Yvelines

Smart disclosure initiatives and new regulations such as GDPR allow individuals to get the control back on their data by gathering their entire digital life in a Personal Data Management Systems (PDMS). Multiple PDMS architectures exist, from centralized web hosting solutions to self-data hosting at home. These solutions strongly differ on their ability to preserve data privacy and to perform collective computations crossing data of multiple individuals (e.g., epidemiological or social studies) but none of them satisfy both objectives. The emergence of Trusted Execution Environments (TEE) changes the game. We propose a solution called Trusted PDMS, combining the TEE and PDMS properties to manage the data of each individual, and a Manifest-based framework to securely execute collective computation on top of them. We demonstrate the practicality of the solution through a real case-study being conducted over 10.000 patients in the healthcare field.

Mots clés: Trusted Execution Environment; Data Privacy; Secure Distributed Computing

Domaines: Informatique [cs]

Riad Ladjel, Nicolas Anciaux, Philippe Pucheral, Guillaume Scerri. A manifest-based framework for organizing the management of personal data at the edge of the network. ISD 2019 - 28th International Conference on Information Systems Development, Aug 2019, Toulon, France. ⟨hal-02269203⟩