Τεχνολογική υποδομή προστασίας δεδομένων στο διαδίκτυο

Abstract

The subject of this doctoral thesis is related with Privacy Enhancing Technologies (PETs) aiming to support a functional model which is not depended on any particular technology and suitable to support the provision of on line Data Protection Services. Three main points are discussed: (a) the formulation of the real world Data Protection conceptual-abstract reference model, (b) the description of the services offering a technological Data Protection Infrastructure on the Internet (DPI) and (c) the composition of the digital data protection functional model which serves the abstract reference model. The adopted methodology to achieve the aforementioned purpose of the thesis is a typical IS development one: user needs a services a reference model a functional model a suggested technologies supporting each role of the reference model participating in the provision of each service. First of all, the researcher has studied the data protection regime as it depicted in various international data protection legal and institutional frameworks. Roles and relationships (data protection principles) have been derived from this task. The roles are: (a) data subject, (b) data processor and (c) Data Protection Authority and the data protection principles, qualifying collected data, are: (a) fairness, (b) purpose, (c) proportionality, (d) accuracy, (e) the right of access, (f) security, (g) anonymity and (h) accountability. The abstract conceptual data protection reference model is deriving from these three (3) roles and eight (8) data protection principles governing the interactions among these roles. In order to transport this reference model to the Internet digital world, Information and Communication Security Technologies (ICST) and PETs should be exploited. This way the notion of the DPI is presented as 'an IS aiming to support the data protection on the Internet within a community governed by a specific data protection regime.' Based on the aforementioned abstract-conceptual reference model, the user needs have been recorded: (a) every role needs support for the data protection principles in which is involved, (b) the data subject needs the right to choose under what circumstances discloses its identity and (c) there should be data subject anonymity circumvention (real identity disclosure) mechanisms in case of a data subject repudiating its actions.