Article in Proceedings INPROC-2013-11

BibliographyStach, Christoph; Mitschang, Bernhard: Privacy Management for Mobile Platforms - A Review of Concepts and Approaches.
In: Proceedings of the 14th International Conference on Mobile Data Management.
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology.
pp. 1-9, english.
IEEE Computer Society Conference Publishing Services, June 2013.
Article in Proceedings (Conference Paper).
CorporationMDM
CR-SchemaK.4.1 (Computers and Society Public Policy Issues)
D.4.6 (Operating Systems Security and Protection)
Keywordsprivacy; profound overview; permission model
Abstract

The still rising popularity of modern mobile phones results in an increased demand for manifold applications for these devices. As Android OS supports the development and usage of third-party software greatly, there are more and more developers for this platform. However, many of those applications handle private data grossly negligent which immediately leads to serious privacy concerns. To make matters worse, the current Android permission rules are much too coarse and incomprehensible from the average user's perspective. But even if s/he understands the meaning of the permissions, s/he must either accept all of them or waive the application.

Therefore we review concepts and approaches towards effective privacy management for mobile platforms. All this is discussed based on the prevailing key players in the mobile market, namely Apple, RIM, Microsoft and Google. As this work has been initiated by Google we mainly concentrated on Android-based concepts towards customizable privacy management approaches. As a result of our review and taking into account current initiatives and trends in the market, we come up with a novel approach, an implementation architecture and a prototype.

Department(s)University of Stuttgart, Institute of Parallel and Distributed Systems, Applications of Parallel and Distributed Systems
Entry dateFebruary 18, 2013
   Publ. Department   Publ. Institute   Publ. Computer Science