Data anonymization for service subscriber's privacy
An IoT/M2M service layer may be provided with the capability to protect user privacy. This functionality may allow the IoT/M2M service layer to anonymize user data, particularly when user data is shared with third party consumers. A privacy policy service may enable the IoT service layer system to generate anonymization (e.g., privacy) policies based on inputs such as legal obligations, subscriber privacy preferences, and an authorization level of the data consumer. Data anonymization policies may be output from the privacy policy service and may be sent to a data anonymization service, where raw data may be anonymized based on the one or more data anonymization policies. The output from the data anonymization service function may be a privatized (e.g., anonymized) version of data that may prevent the data consumer from discovering one or more identifying characteristics of a user.
1. A method comprising:
receiving, by a service supporting service capabilities through a set of Application Programming Interfaces (APIs) and from an application service provider, a request to access data;
determining, by the service and based on the request to access the data, one or more privacy policies to be applied to the data for the application service provider, wherein the one or more privacy policies are generated by the service based on at least one of a legal obligation, a subscriber privacy preference, or an authorization level;
generating, by the service and based on the determined one or more privacy policies, an anonymized data set that prevents the application service provider from determining one or more user-identifying characteristics of the data; and
sending, to the application service provider, the anonymized data set.
2. The method of claim 1 , wherein generating the anonymized data set comprises one or more of removing at least a portion of the data or modifying at least a portion of the data.
3. The method of claim 2 , wherein modifying at least a portion of the data comprises one or more of abbreviating at least a portion of the data, substituting at least a portion of the data, shuffling at least a portion of the data, or encrypting at least a portion of the data.
4. The method of claim 1 , wherein the one or more privacy policies comprise one or more user policies associated with a particular user, one or more application service provider policies, or one or more legal policies.
5. The method of claim 1 , wherein the request to access the data comprises one or more characteristics associated with the application service provider.
6. The method of claim 5 , further comprising selecting, based at least on the one or more characteristics associated with the application service provider, one or more of a plurality of privacy policies.
7. The method of claim 1 , wherein sending the anonymized data set comprises sending, to the application service provider, at least one of an indication that the data has been anonymized or an indication of the anonymization techniques used to anonymize the data.
8. An apparatus comprising a processor and a memory, the memory storing computer-executable instructions which, when executed by the processor, implement a service of a communications network, wherein the service supports service capabilities through a set of Application Programming Interfaces (APIs), and wherein the computer-executable instructions further cause the service to perform operations comprising:
receiving, from an application service provider, a request to access data;
determining, based on the request to access the data, one or more privacy policies to be applied to the data for the application service provider, wherein the one or more privacy policies are generated by the service based on at least one of a legal obligation, a subscriber privacy preference, or an authorization level;
generating, based on the determined one or more privacy policies, an anonymized data set that prevents the application service provider from determining one or more user-identifying characteristics of the data; and
sending, to the application service provider, the anonymized data set.
9. The apparatus of claim 8 , wherein generating the anonymized data set comprises one or more of removing at least a portion of the data or modifying at least a portion of the data.
10. The apparatus of claim 9 , wherein modifying at least a portion of the data comprises one or more of abbreviating at least a portion of the data, substituting at least a portion of the data, shuffling at least a portion of the data, or encrypting at least a portion of the data.
11. The apparatus of claim 8 , wherein the one or more privacy policies comprise one or more user policies associated with a particular user, one or more application service provider policies, or one or more legal policies.
12. The apparatus of claim 8 , wherein the request to access the data comprises one or more characteristics associated with the application service provider.
13. The apparatus of claim 12 , wherein the instructions, when executed, further cause the service to perform operations comprising selecting, based at least on the one or more characteristics associated with the application service provider, one or more of a plurality of privacy policies.
14. The apparatus of claim 8 , wherein sending the anonymized data set comprises sending, to the application service provider, at least one of an indication that the data has been anonymized or an indication of the anonymization techniques used to anonymize the data.
15. A non-transitory computer readable storage medium storing instructions which, when executed by a processor, cause:
receiving, by a service supporting service capabilities through a set of Application Programming Interfaces (APIs) and from an application service provider, a request to access data;
determining, by the service and based on the request to access the data, one or more privacy policies to be applied to the data for the application service provider, wherein the one or more privacy policies are generated by the service based on at least one of a legal obligation, a subscriber privacy preference, or an authorization level;
generating, by the service and based on the determined one or more privacy policies, an anonymized data set that prevents the application service provider from determining one or more user-identifying characteristics of the data; and
sending, to the application service provider, the anonymized data set.
16. The non-transitory computer readable storage medium of claim 15 wherein generating the anonymized data set comprises one or more of removing at least a portion of the data or modifying at least a portion of the data.
17. The non-transitory computer readable storage medium of claim 16 , wherein modifying at least a portion of the data comprises one or more of abbreviating at least a portion of the data, substituting at least a portion of the data, shuffling at least a portion of the data, or encrypting at least a portion of the data.
18. The non-transitory computer readable storage medium of claim 15 , wherein the one or more privacy policies comprise one or more user policies associated with a particular user, one or more application service provider policies, or one or more legal policies.
19. The non-transitory computer readable storage medium of claim 15 , wherein the request to access the data comprises one or more characteristics associated with the application service provider.
20. The non-transitory computer readable storage medium of claim 19 , wherein the instructions, when executed, further cause the service to perform operations comprising selecting, based at least on the one or more characteristics associated with the application service provider, one or more of a plurality of privacy policies associated with the particular user.
21. The method of claim 1 , wherein the service is provided as a middleware service for IoT services.
22. The method of claim 21 , wherein the middleware service is a service layer located on top of network protocol stacks.
23. The method of claim 22 wherein the service layer is defined according to ETSI/oneM2M standards.