An Evaluation Framework for Future Privacy Protection Systems: A Dynamic Identity Ecosystem Approach

David Liau, Razieh Nokhbeh Zaeem, K. Suzanne Barber

2020

Abstract

Today, more than ever, everyday authentication processes involve combinations of Personally Identifiable Information (PII) to verify a person’s identity. Meanwhile the number of identity thefts is increasing dramatically compared to the past decades. As a response to this phenomenon, numerous privacy protection regulations, and identity management frameworks and companies thrive luxuriantly. In this paper, we leverage previous work in the Identity Ecosystem, a Bayesian network mathematical representation of a person’s identity, to create a framework to evaluate identity protection systems. After reviewing the Identity Ecosystem, we populate a dynamic version of it and propose a protection game for a person’s PII given that the owner and the attacker both gain some level of control over the status of other PII within the dynamic Identity Ecosystem. Next, We present a game concept on the Identity Ecosystem as a single round game with complete information. We then formulate a stochastic shortest path game between the owner and the attacker on the dynamic Identity Ecosystem. The attacker is trying to expose the target PII as soon as possible while the owner is trying to protect the target PII from being exposed. We present a policy iteration algorithm to solve the optimal policy for the game and discuss its convergence. Finally, an evaluation and comparison of identity protection strategies is provided given that an optimal policy is used against different protection policies. This study is aimed to understand the evolutionary process of identity theft and provide a framework for evaluating different identity protection strategies and in future privacy protection system.

Download


Paper Citation


in Harvard Style

Liau D., Zaeem R. and Barber K. (2020). An Evaluation Framework for Future Privacy Protection Systems: A Dynamic Identity Ecosystem Approach. In Proceedings of the 12th International Conference on Agents and Artificial Intelligence - Volume 1: ICAART, ISBN 978-989-758-395-7, pages 136-143. DOI: 10.5220/0008913501360143


in Bibtex Style

@conference{icaart20,
author={David Liau and Razieh Zaeem and K. Barber},
title={An Evaluation Framework for Future Privacy Protection Systems: A Dynamic Identity Ecosystem Approach},
booktitle={Proceedings of the 12th International Conference on Agents and Artificial Intelligence - Volume 1: ICAART,},
year={2020},
pages={136-143},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0008913501360143},
isbn={978-989-758-395-7},
}


in EndNote Style

TY - CONF

JO - Proceedings of the 12th International Conference on Agents and Artificial Intelligence - Volume 1: ICAART,
TI - An Evaluation Framework for Future Privacy Protection Systems: A Dynamic Identity Ecosystem Approach
SN - 978-989-758-395-7
AU - Liau D.
AU - Zaeem R.
AU - Barber K.
PY - 2020
SP - 136
EP - 143
DO - 10.5220/0008913501360143