A Blockchain-Based Platform for Consent Management of Personal Data Processing in the IoT Ecosystem

In the Internet of Things (IoT) ecosystem, the volume of data generated by devices in the user’s environment is continually increasing and becoming of particular value. In such an environment the average user is bound to face considerable difficulties in understanding the size and scope of his/her c...

Full description

Saved in:
Bibliographic Details
Published in:Security and communication networks 2019, Vol.2019 (2019), p.1-15
Main Authors: Papanikolaou, Alexandros, Ilioudis, Christos, Kritsas, Antonios, Drosatos, George, Rantos, Konstantinos, Filippidis, Adam P.
Format: Article
Language:English
Subjects:
Access control
Automation
Blockchain
Consent
Consents
Cryptography
Data collection
Data processing
Digital signatures
Electronic devices
General Data Protection Regulation
Internet of Things
Personal information
Privacy
Stability
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:In the Internet of Things (IoT) ecosystem, the volume of data generated by devices in the user’s environment is continually increasing and becoming of particular value. In such an environment the average user is bound to face considerable difficulties in understanding the size and scope of his/her collected data. However, the provisions of the European General Data Protection Regulation (GDPR) require data subjects to be able to control their personal data, be informed, and consent to its processing in an intelligible manner. This paper proposes ADVOCATE platform, a user-centric solution that allows data subjects to easily manage consents regarding access to their personal data in the IoT ecosystem. The proposed platform also assists data controllers to meet GDPR requirements, such as informing data subjects in a transparent and unambiguous manner about the data they will manage, the processing purposes, and periods. The integrity of personal data processing consents and the immutable versioning control of them are protected by a blockchain infrastructure. Finally, the paper provides a prototype implementation of the proposed platform that supports the main consents management functionality.
ISSN:1939-0114
1939-0122
DOI:10.1155/2019/1431578