Security Management Suitable for Lifecycle of Personal Information in Multi-User IoT Environment

Area of Science:

• Computer Science
• Information Security
• Internet of Things

Background:

• The increasing volume of user data generated by Internet activities highlights the critical need for robust personal information management.
• The proliferation of Internet of Things (IoT) applications, particularly in the sharing economy (e.g., shared healthcare devices, vehicle sharing), intensifies the risks associated with personal data usage.
• Existing personal information management practices are often insufficient, necessitating advanced security measures.

Purpose of the Study:

• To propose a novel method for the secure management of personal information within IoT devices and application environments.
• To ensure that personal information handling in IoT aligns with the stringent requirements of the European General Data Protection Regulation (GDPR).
• To address the security vulnerabilities inherent in the increasing use of personal data in IoT services.

Main Methods:

• Detailed description of the personal information lifecycle stages within IoT application services.
• Development of a security management method tailored to each lifecycle stage, considering data flow within IoT devices.
• Validation of the proposed method's effectiveness and applicability through practical application in two distinct service scenarios.

Main Results:

• The proposed method provides a structured approach to personal information management across the entire data lifecycle in IoT.
• Evaluation demonstrated the usefulness and applicability of the scheme in real-world IoT service contexts.
• The method successfully aligns with GDPR requirements for personal data protection in IoT environments.

Conclusions:

• The developed method offers a secure framework for managing personal information in IoT applications, adhering to GDPR standards.
• This contributes to mitigating risks associated with personal data in the expanding IoT sector.
• The findings are expected to foster trust and facilitate further development in IoT businesses that handle sensitive user data.