Software architectures for Secure, Private, User-Controlled Smart devices

Descripción del proyecto

Mejorar la seguridad de los dispositivos personales

A medida que se generaliza el uso de dispositivos inteligentes, la Unión Europea ha expresado su preocupación por el excesivo control que los proveedores extracomunitarios ejercen sobre los datos personales, lo que podría limitar las libertades personales. Para dar respuesta a estas preocupaciones, el equipo del proyecto SPUCS, financiado por las acciones Marie Skłodowska-Curie, se dedica a desarrollar nuevas estructuras de preservación de la intimidad para dispositivos personales que puedan reducir el control de los proveedores. Ello permitirá a los usuarios mantener sus sistemas operativos y aplicaciones preferidos de forma segura y privada. Los objetivos del proyecto abarcan la mejora de la seguridad de los dispositivos móviles al permitir que múltiples sistemas operativos funcionen de forma segura y privada. Además, pretende crear métodos seguros para ejecutar aplicaciones individuales independientemente del sistema operativo o del «software» del proveedor. Por último, el equipo del proyecto se centrará en aplicar una estrategia de adopción destinada a fomentar una Europa más segura y autosuficiente.

Objetivo

People increasingly depend on their personal smart devices (smartphones, smart watches, voice assistants) to communicate, access information, transact, and perform critical functions. These devices overwhelmingly comprise proprietary software and hardware components made by a handful of non-EU vendors. These vendors have exceptional control over those devices, raising justified concerns over anti-competitive practices, massive data gathering, surveillance, denial of service, and consequently personal freedoms and democracy. Digital sovereignty has been identified as a key political priority for the EU. SPUCS: “software architectures for Secure, Private, and User-Controlled Smart devices” contributes novel privacy-preserving architectures, realizable on existing hardware, that limit the control of vendors on user devices towards a future of open, sovereign personal devices. While previous initiatives for open and privacy-preserving smart devices lacked in functionality and therefore in adoption, SPUCS introduces concepts and methods that enable users to continue using their preferred operating systems and applications in an isolated way, with increased privacy protection. Specifically, the project will contribute secure mechanisms to seamlessly run multiple mobile operating systems simultaneously on a mobile device with strong isolation and privacy guarantees – limiting vendors’ ability to collect and connect data. Furthermore, the project will develop methods for securely running individual applications (phone, messaging, banking) on an open platform without trusting the operating system or proprietary vendor software. Finally, the project will plan an adoption strategy that will boost the scientific and industrial impact of the results towards a secure and self-sovereign Europe. The project also fosters interdisciplinary two-way transfer of knowledge between the researcher and the host, as well as training of the researcher in advanced scientific techniques.