IoT Notary and Canopy: Verifiable Privacy for Smart Spaces

2019

Smart buildings and homes collect data about the people inside them. Privacy policies say what should happen to that data; these projects make it possible to prove what actually happened.

IoT Notary

Produces tamper-evident, cryptographically signed records of exactly what a smart environment’s sensors captured and under which policy, so that compliance can be checked independently after the fact instead of taken on faith.

  • Best Paper Award, IEEE NCA 2019 (paper)
  • Extended in ACM Transactions on Internet of Things, 2021 (paper)
  • Built on by other researchers, for example as an enforcement mechanism behind user-facing privacy controls in ACM CHI 2021 work.

Canopy

Stops eavesdroppers from deducing what residents are doing at home by watching the timing and volume of smart-device traffic, a side channel that matters most for households that rely on connected medical and assisted-living devices. Devices’ compliance with the protocol is itself verifiable.