PDGuard: an architecture for the control and secure processing of personal data

Abstract

Online personal data are rarely, if ever, effectively controlled by the users they concern. Worse, as demonstrated by the numerous leaks reported each week, the organizations that store and process them fail to adequately safeguard the required confidentiality. In this paper, we propose pdg uard, a framework that defines prototypes and demonstrates an architecture and an implementation that address both problems. In the context of pdg uard, personal data are always stored encrypted as opaque objects. Processing them can only be performed through the pdg uard application programming interface ( api ), under data and action-specific authorizations supplied online by third party agents. Through these agents, end-users can easily and reliably authorize and audit how organizations use their personal data. A static verifier can be employed to identify accidental api misuses. Following a security by design approach, pdg uard changes the problem of personal data management from the, apparently, intractable problem of supervising processes, operations, personnel, and a large software stack to that of auditing the applications that use the framework for compliance. We demonstrate the framework’s applicability through a reference implementation, by building a pdg uard-based e-shop, and by integrating pdg uard into the The Guardian newspaper’s website identity application.