Privacy and Confidentiality in Process Mining: Threats and Research Challenges

2022 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Elkoumy, Gamal; Fahrenkrog-Petersen, Stephan A.; Sani, Mohammadreza Fani; Koschmider, Agnes; Mannhardt, Felix; Von Voigt, Saskia Nuñez; Rafiei, Majid; Waldthausen, Leopold Von

Abstract: Privacy and confidentiality are very important prerequisites for applying proces ... Expand

Abstract: Privacy and confidentiality are very important prerequisites for applying process mining to comply with regulations and keep company secrets. This article provides a foundation for future research on privacy-preserving and confidential process mining techniques. Main threats are identified and related to a motivation application scenario in a hospital context as well as to the current body of work on privacy and confidentiality in process mining. A newly developed conceptual model structures the discussion that existing techniques leave room for improvement. This results in a number of important research challenges that should be addressed by future process mining research. Collapse

Topics: privacy process mining General Data Protection Regulation differential privacy legal context

Methods: event log business process modeling conceptual modelling literature study computational algorithm

Evolution of Format Preserving Encryption on IoT Devices: FF1+

2019 | HICSS | Citations: 0

Authors: Baccarini, Alessandro N; Hayajneh, Thaier

Abstract: The Internet of Things (IoT) is a network of interconnected low-power sensing de ... Expand

Abstract: The Internet of Things (IoT) is a network of interconnected low-power sensing devices designed to interact and communicate with each other. To avoid compromising user privacy, it is necessary to encrypt these channels. We introduce Format Preserving Encryption (FPE), a modern cryptosystem that allows full customization of the ciphertext, while offering comparable security to AES. To gauge the performance of FPE, we compare the NIST-approved FF1 algorithm against several symmetric and asymmetric encryption schemes on a Raspberry Pi 3. While suitable for small plaintexts, FF1 breaks down for longer character strings. We propose a modified algorithm, FF1+, that implements dynamic round selection and key scheduling. Significant performance improvements are observed in our results, thus demonstrating FF1+ as a viable cryptosystem for IoT devices. Collapse

Topics: data encryption internet of things mobile system cryptanalysis Advanced Encryption Standard

Methods: computational algorithm

Multi-tag and multi-owner RFID ownership transfer in supply chains

2011 | Decision Support Systems | Citations: 0

Authors: Kapoor, Gaurav; Zhou, Wei; Piramuthu, Selwyn

Abstract: In any supply chain, there is a high likelihood for individual objects to change ... Expand

Abstract: In any supply chain, there is a high likelihood for individual objects to change ownership at least once in their lifetime. As RFID tags enter the supply chain, these RFID-tagged objects should ideally be able to seamlessly accommodate ownership transfer issues while also accomplishing their primary intended purpose. Physical ownership transfer does not translate to strict ownership transfer in the presence of RFID tags given the wireless nature of communication with these tags. Moreover, whereas existing protocols implicitly assume a single tag that is owned by a single entity, it is not uncommon to encounter scenarios where tag ownership is shared among multiple entities. A dual of this is the case of an object with multiple tags. We consider ownership transfer scenarios for shared ownership transfer and single object with multiple RFID tags. In the multiple-tagged object case, we consider the possibility where objects gain and lose tags over time. We also present a protocol for simultaneous transfer of ownership of multiple tags between owners. Since ownership transfer without a trusted third party (TTP) is difficult to achieve, we propose a shared ownership sharing protocol and evaluate its properties. Collapse

Topics: radio frequency identification electronic authentication cryptanalysis data encryption public key encryption