PhD Forum Abstract: Privacy-preserving Data Collection and Sharing in Smart Spaces

While the expanding Internet of Things (IoT) ecosystem provides services that improve space operation efficiency and benefit individuals, its pervasive monitoring ability also causes serious privacy concerns. Recently, an increasing number of privacy laws (e.g., GDPR, CCPA) have been proposed to regulate data controllers who own the space and collect data. The data controllers are mandated to enforce appropriate privacy-preserving mechanisms before the data is released or used for any purpose. However, facilitating the regulations in a smart space faces challenges like an untrusted execution environment, lack of a privacy-compliant data model, and limited computing resources at the edge. This extended abstract explores the issues by discussing our experience with instrumenting a real-world campus-scale IoT testbed. We then propose a system for attestable data collection, privacy-preserving data sharing, and efficient data processing at the edge.