Logo des Repositoriums

Auflistung nach Schlagwort "Profiling"

1 - 4 von 4
  • Konferenzbeitrag
    Gaining Back the Control Over Identity Attributes: Access Management Systems Based on Self-Sovereign Identity
    (Open Identity Summit 2024, 2024) Keil, Kenneth-Raphael; Bochnia, Ricardo; Gudymenko, Ivan; Köpsell, Stefan; Anke, Jürgen
    Digital employee cards used for door access control offer benefits, but concerns about traceability, profiling and performance monitoring have led to opposition from workers’ councils and employees. However, the emerging identity management approach, Self-Sovereign Identity (SSI), can address these concerns by giving control over disclosed identity attributes back to the end user. This paper analyzes a real-world access management scenario in a hospital building and applies the SSI paradigm to address the identified issues. The analysis assumes a semi-honest observing attacker sniffing on the payload and the transport layer. The SSI-based proof of concept is shown to have a high potential to protect against traceability and profiling. However, in addition to the careful technical implementation of SSI, it is important to consider non-technical factors such as governance for a holistic solution. We propose potential strategies to further minimize privacy risks associated with SSI-based employee identity management using mediators.
  • Textdokument
    myneData: Towards a Trusted and User-controlled Ecosystem for Sharing Personal Data
    (INFORMATIK 2017, 2017) Matzutt, Roman; Müllmann, Dirk; Zeissig, Eva-Maria; Horst, Christiane; Kasugai, Kai; Lidynia, Sean; Wieninger, Simon; Ziegeldorf, Jan Henrik; Gudergan, Gerhard; gen. Döhmann, Indra Spiecker; Wehrle, Klaus; Ziefle, Martina
    Personal user data is collected and processed at large scale by a handful of big providers of Internet services. This is detrimental to users, who often do not understand the privacy implications of this data collection, as well as to small parties interested in gaining insights from this data pool, e.g., research groups or small and middle-sized enterprises. To remedy this situation, we propose a transparent and user-controlled data market in which users can directly and consensually share their personal data with interested parties for monetary compensation. We define a simple model for such an ecosystem and identify pressing challenges arising within this model with respect to the user and data processor demands, legal obligations, and technological limits. We propose myneData as a conceptual architecture for a trusted online platform to overcome these challenges. Our work provides an initial investigation of the resulting myneData ecosystem as a foundation to subsequently realize our envisioned data market via the myneData platform.
  • Konferenzbeitrag
    Perception of Social Costs of Digitalization: Profiling Top Managers, Middle Managers, and Front-line Employees
    (1st International Conference on Software Product Management 2023, 2023) Bogodistov, Yevgen; Schwaiger, Antonia; Beimborn, Daniel
    Although information technology has become advanced in profiling users, we often offer this knowledge to marketing and forget that profiling is needed for information technology implementation itself. If digitalization is introduced in a firm, it may encounter internal resistance. Top managers, middle managers, and front-line employees may have different expectations with regard to digitalization initiatives in their firms. Having different visions of what digitalization is about may result in conflicts with regard to digital solutions selection and implementation and, consequently, lead to digitalization failure. In this paper, we look at differences in digitalization cost perception using a Discrete Choice Experiment. Based on our findings, we propose to approach firms by profiling top managers, middle managers, and front-line employees.
  • Konferenzbeitrag
    The (un)lawful processing of personal data manifestly made public by the data subject for political advertising purposes: An analysis from the perspective of data protection based on the Brazilian experience and its European influences
    (INFORMATIK 2024, 2024) Beutinger Paiva, Eduarda; Dickow Paganella, Victoria
    The widespread use of online platforms for political advertising has prompted concerns regarding the processing of personal data for purposes such as sponsored boosting of political content and political microtargeting. The implementation of targeting and amplification techniques enables political actors to address content in a tailored manner to target audiences and to increase the reach of such content in the online domain. The availability of a vast quantity of data enables the aforementioned processes. This paper examines the situation from the perspective of Brazil, based on the Brazilian Electoral Law and Data Protection Law, as well as the European Union legal framework that has had an influence on it, such as the DSA, the RTT, and the GDPR. The focus of this paper is on a specific category of data that presents a challenging situation in both jurisdictions: personal data that has been manifestly made public by the data subject.