Ernstberger, Jens;
Lauinger, Jan;
Elsheimy, Fatima;
Zhou, Liyi;
Steinhorst, Sebastian;
Canetti, Ran;
Miller, Andrew;
... Song, Dawn; + view all
(2023)
SoK: Data Sovereignty.
In:
2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P).
(pp. pp. 122-143).
IEEE: Delft, Netherlands.
Preview |
Text
2023-967.pdf - Other Download (784kB) | Preview |
Abstract
Society appears to be on the verge of recognizing the need for control over sensitive data in modern web applications. Recently, many systems claim to give control to individuals, promising the preeminent goal of data sovereignty. However, despite recent attention, research and industry efforts are fragmented and lack a holistic system overview. In this paper, we provide the first transecting systematization of data sovereignty by drawing from a dispersed body of knowledge. We clarify the field by identifying its three main areas: (i) decentralized identity, (ii) decentralized access control and (iii) policy-compliant decentralized computation. We find that literature lacks a cohesive set of formal definitions. Each area is considered in isolation, and priorities in industry and academia are not aligned due to a lack of clarity regarding user control. To solve this issue, we propose formal definitions for each sub-area. By highlighting that data sovereignty transcends the domain of decentralized identity, we aim to guide future works to embrace a broader perspective on user control. In each section, we augment our definition with security and privacy properties, discuss the state of the art and proceed to identify open challenges. We conclude by highlighting synergies between areas, emphasizing the real-world benefit obtained by further developing data sovereign systems.
| Type: | Proceedings paper |
|---|---|
| Title: | SoK: Data Sovereignty |
| Event: | 8th IEEE European Symposium on Security and Privacy (EuroS and P) |
| Location: | TU Delft, ECHO, Delft, NETHERLANDS |
| Dates: | 3 Jul 2023 - 7 Jul 2023 |
| ISBN-13: | 9781665465120 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1109/EuroSP57164.2023.00017 |
| Publisher version: | https://doi.org/10.1109/EuroSP57164.2023.00017 |
| Language: | English |
| Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher’s terms and conditions. |
| Keywords: | ANONYMOUS CREDENTIALS, Computer Science, Computer Science, Information Systems, Computer Science, Interdisciplinary Applications, Computer Science, Theory & Methods, PRIVACY, Science & Technology, Technology |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery-pp.ucl.ac.uk/id/eprint/10182319 |
Archive Staff Only
 |
View Item |
