Archive - 14th IFIP Summer School on Privacy and Identity Management 2019

14th IFIP Summer School in Brugg/Windisch

The 14th International IFIP Summer School on Privacy and Identity Management – Data for Better Living: AI and Privacy took place on August 19-23, 2019 in Brugg/Windisch, Switzerland. The Summer School was hosted by the University of Applied Sciences and Arts Northwestern Switzerland (FHNW).

Proceedings

The Summer School proceedings were published by Springer in the IFIP Advances in Information and Communication Technology series and can be found here.

Call for Papers

Data for Better Living: AI and Privacy

Data for better living is a core challenge today. Recent advances in information and communication technology, such as the Internet of Things and cloud computing technologies, enable the collection, storing, sharing, analysis and processing of large amounts of data, in a scalable and efficient manner.

Thanks to this progress, artificial intelligence (AI) has renewed its popularity in many different sectors, such as healthcare, finance, heavy industry, and crime prevention and detection. Based on all the data available, companies, organisations, public authorities or other stakeholders can use advanced machine learning techniques in many different ways. They can infer valuable insights from evidence, improve the accuracy of their predictions, and make better or faster decisions.

At the same time, these benefits may come with a high cost in terms of privacy exposure given the high sensitivity and vast amounts of data that are collected and processed. The collected/processed data can result in the inference of rich and accurate information about individuals. Such profiling poses serious privacy risks. In the last few years, severe data breaches have occurred causing serious damage. Adversaries may exploit the technology to disrupt existing analytics or engage in malicious activities, such as developing privacy-invasive learning systems, without detection. Organisations face the challenge of integrating data protection and identity management into their risk management systems or establish them.

Recent advances in artificial intelligence techniques may help identify such privacy exposure and hence improve privacy protection. There is an urgent need for data processing that enables sufficient protection of collected data, safeguards individuals’ rights and freedoms, and yet still makes use of AI tools to improve individuals’ lives and serve the public interest.

The goal of this summer school is to focus on the relationship between AI and privacy. Attendees at the school will identify the main threats to individuals’ rights and freedoms, discuss challenges to reconcile AI and privacy, and find ways to address conflicting goals and requirements. They will, overall, take into account technical, legal, economic, and social science challenges.

Holistic Approach and Interdisciplinarity

The IFIP Summer Schools take a holistic approach to society and technology and support interdisciplinary exchange through keynote and plenary lectures, tutorials, workshops, and research paper presentations. In particular, participants’ contributions that combine technical, legal, regulatory, socio-economic, social or societal, political, ethical, anthropological, philosophical, or psychological perspectives are welcome. The interdisciplinary character of the work is fundamental to the School.

Workshops and Scientific Papers

The research paper presentations and the workshops have a particular focus on involving students, and on encouraging the publication of high-quality, thorough research papers by students and young researchers.

This year’s IFIP Summer School was particularly interested in contributions on Data for Better Living looking at the perspectives of Artificial Intelligence (AI) and Privacy.

Call for Submissions

The Summer School takes a holistic approach to society and technology and supports interdisciplinary exchange through keynote and plenary lectures, tutorials, workshops, and research paper presentations. In particular, participants’ contributions that combine any of the following approaches are welcome: technical, legal, regulatory, socioeconomic, social or societal, political, ethical, anthropological, philosophical, historical, psychological, or media & communication studies perspectives. The interdisciplinary character of the work has long been fundamental to the School.

The research paper presentations and the workshops focus on involving students, and on encouraging the publication of high-quality, thorough, research papers by students/young researchers. To this end, the School has a three-phase review process for submitted papers.

In the first phase, submissions are extended abstracts. Extended abstracts should be 2-4 pages. Submissions within the scope of the call are selected for presentation at the School. For accepted submissions, the full papers of up to 8 pages in length in Springer LNCS format are to be submitted before the Summer School takes place and they appear in the (unreviewed) pre-proceedings.
In a second review phase, the full papers are reviewed soon after the Summer School. The students are invited to resubmit their full papers after they have revised them based on two sets of feedback: the discussions that took place at the Summer School, as well as a formal written review by programme committee members.
In the third review phase, after the full papers are resubmitted with up to 16 pages, they are reviewed again for inclusion in the School’s proceedings, which will be published by Springer.

Submissions by senior researchers and participants in European, national, or regional/community research projects are also very welcome and are generally published in a separate section of the book volume.

Call for Tutorials and Workshops

The School also welcomes contributions in the form of tutorials and workshop proposals from a wide range of disciplines, including computer science, economics, ethics, law, psychology, sociology, political and other social sciences, surveillance studies, media and communication studies, and others. The timelines for submission of these tutorials and workshops are the same as those of the student papers. Topics of interest include but are not limited to: concepts, technologies and applications, design, enforcement mechanisms, effects, attitudes, and user practices.

Tutorials are expected to last one or two hours. Proposals should contain a short summary and state the level and background required for attendees to follow the tutorial.

Workshops are expected to last one or two hours and must generate short papers that recapitulate the outcome and the kinds of discussions raised in the School, for inclusion in the post-proceedings. Proposals should contain a short statement summarising the topic(s) to be discussed and the expected contributions from the audience members, e.g. responding to a questionnaire or conducting a small experiment. Proposers should indicate whether any special equipment is needed for the workshop, such as audiovisual systems or computational equipment and support.

Topics of Interest

General Topics

Privacy-enhancing technologies (PETs) & transparency-enhancing technologies (TETs)
Privacy and identity management (services, technologies, infrastructures, usability aspects, legal and socio-economic aspects)
Privacy and security in citizens’ digital communications, online platforms, e-mail and instant messaging
Privacy protection and in particular confidentiality of communications by both traditional players/incumbents and OTTs
Privacy-by-design, privacy-by-default, value-sensitive design, ethical-by-design, human-rights-by-design, data protection/privacy impact assessments, data protection on the ground
Social accountability
Privacy standards and seals
Digital literacy and data (infrastructure) literacy
Regulatory regimes and instruments

Important Dates

Event	Deadline
Extended Abstracts (2-4 pages):	May 27, 2019 (extended)
Workshops and Tutorials:	May 27, 2019 (extended)
Notifications:	June 6, 2019
Early Bird Registration Deadline:	July 22, 2019
Full Papers for Pre-Proceedings (8 pages):	August 10, 2019
Summer School:	August 19-23, 2019
Feedback to Authors:	September 23, 2019
Full Papers for Springer Proceedings (16 pages):	October 25, 2019
Notifications:	November 29, 2019
Camera-Ready Copies:	December 20, 2019

Program

Monday, August 19, 2019

Time	Track I	Track II	Track III
9:00-9:15	Welcome and Opening: Samuel Fricker
9:15-10:15	Invited Talk I Session Chair: Samuel Fricker Room: 6.-1D09 Jim Dratwa (European Commission, European Group on Ethics in Science and New Technologies, EU) Ethics of Artificial Intelligence
10:15-10:45	Coffee Break
10:45-12:45	Paper session I: Sensors and biometrics Session Chair: Andreas Nautsch Room: 6.-1D09 Jacob Leon Kröger, Philip Raschke and Otto Hans-Martin Lutz What Does Your Gaze Reveal About You? On the Privacy Implications of Eye Tracking / Privacy Implications of Audio Mining: The Growing Threat of Unexpected Inferences Giuseppe Garofalo, Davy Preuveneers and Wouter Joosen Data privatizer for biometric applications and online identity management Mohamed Abomhara, Sule Yildirim Yayilgan, Marina Shalaginova and Zoltán Székely Border Control and Use of Biometrics: Reasons Why Right to Privacy can not be Absolute		Workshop I Room: 6.4H01 Judith Vermeulen, Eva Lievens and Kristin Van Damme Co-designing a news diversity algorithmic model based on news consumers’ agency and fine-grained content modeling
12:45-13:45	Lunch break
13:45-14:45	Invited Talk II Session Chair: Eva Lievens Room: 6.-1D09 Francien Dechesne (Leiden University, Center for Law and Digital Technologies, NL) Fair enough? On (avoiding) bias in data, algorithms and decisions
14:45-15:00	Track Change Break
15:00-16:15	Paper session II: Privacy and Artificial Intelligence Session Chair: Melek Önen Room: 6.-1D09 Yuliyan V. Maksimov Protection of Data Privacy and Intellectual Property through Licenses in Artificial Intelligence Competitions and Consortium Collaborations Philipp Lüthi, Thibault Gagnaux and Marcel Würsch Distributed Ledger for Provenance Tracking of Artificial Intelligence Assets	Paper session III: Users and Usability Session Chair: Ina Schiering Room: 6.4H05 Johanna Johansen A Model to Support Usability Evaluations of Privacy Oguz Özgür Karadeniz and Stefan Schiffner Get to know your geek: towards a sociological understanding
16:15-16:45	Coffee Break
16:45-17:45	Invited Talk III Session Chair: Melek Önen Room: 6.-1D09 Vaclav Matyas (Masaryk University, Faculty of Informatics, Brno, CZ) Open tools for security case study on the ROCA vulnerability
17:45-18:00	Wrap up
18:00-19:00	Welcome Reception

Tuesday, August 20, 2019

Time	Track I	Track II	Track III
9:15-10:15	Invited Talk IV Session Chair: Michael Friedewald Room: 6.-1D09 Michele Loi (University of Zurich, Digital Society Initiative, CH) Ethics of nudging privacy and cybersecurity online
10:15-10:45	Coffee Break
10:45-12:45	Paper session IV: Regulation of Artificial Intelligence Session Chair: Eva Lievens Room: 6.-1D09 Carl Vander Maelen High Stakes, Many Stakeholders: Building Blocks for the Successful Regulation of AI Sümeyye Elif Biber Filling the Gap between Codes and Norms in the Robotic Age: The Principle of Dynamic Interpretation for the Protection of the Right to Privacy Júlia Zomignani Barboza, Lina Jasmontaite and Laurence Diver In a race to make the world a better place, humanitarian organisations and their donors must not rely blindly on artificial intelligence	Paper session V: Privacy by Design Session Chair: Orhan Ermis Room: 6.4H05 Joseph Bugeja and Andreas Jacobsson On the Design of a Privacy-focused Datalife Cycle for Smart Living Spaces Shukun Tokas, Olaf Owe and Toktam Ramezanifarkhani Language-Based Mechanisms for Privacy by Design Kalle Hjerppe, Jukka Ruohonen and Ville Leppänen On Static Analysis for Protecting Personal Data	Workshop II Room: 6.4H01 Tore Kasper Frederiksen, Julia Hesse, Anja Lehmann and Rafael Torres Moreno Oblivious Identity Management for Private User-Friendly Services
12:45-13:45	Lunch break
13:45-14:45	Invited Talk V Session Chair: Samuel Fricker Room: 6.-1D09 Christian Kunz (Cofounder & CEO, Bitsabout.Me, Bern, CH) Privacy and Convenience is not a Zero Sum Game – Design Lessons from an Operational Personal Data Marketplace
14:45-15:00	Track Change Break
15:00-16:15	Paper session VI: Privacy, Profiling and Discrimination Session Chair: Stefan Schiffner Room: 6.-1D09 Azadeh Akbari Intelligent Filtering as Spatial\|Data Injustice: The Case of Iran Judith Vermeulen The potential of news personalisation to influence thoughts and opinions: an analysis in the light of Article 22 GDPR		Tutorial I Room: 6.4H01 Andreas Nautsch et al. Preserving Privacy in Speaker and Speech Characterisation
16:15-16:45	Coffee Break
16:45-17:45	Invited Talk VI Session Chair: Samuel Fricker Room: 6.-1D09 Kurt Tutschku (Blekinge Institute of Technology, Telecommunication systems, Karlskrona, SE) Flexible Secure Spaces for Cloud/Edge Computing
17:45-18:00	Wrap up

Wednesday, August 21, 2019

Time	Track I	Track II	Track III
9:15-10:15	Invited Talk VII Session Chair: Eva Lievens Room: AULA (Building 3) Sanne Kruikemeier (University of Amsterdam, Political Communication & Journalism, NL) Online Personalized Advertising
10:15-10:45	Coffee Break
10:45-12:45	Paper session VII: Identity Management Session Chair: Stefan Schiffner Room: AULA (Building 3) Abylay Satybaldy and Mariusz Nowostawski Self-Sovereign Identity Systems: Definitions and Comparison Criteria Anar Bazarhanova and Kari Smolander Digital Identity Architectures: Systematic Review and Non-technical Assumptions Mahdi Akil, Lejla Islami, Leonardo Martucci and Simone Fischer-Hübner Privacy-Preserving Identifiers for Smart Environments – Scenarios & Literature Review	Paper session VIII: Individual Control over Data Session Chair: Marc van Lieshout Room: 1.333 Chathurangi Ishara Wickramasinghe and Delphine Reinhardt A Survey-based Exploration of Users’ Awareness and their Willingness to Protect their Data with Smart Objects Frank Ebbers How to Protect my Privacy? – Classifying End User Information Privacy Protection Behavior Yefim Shulman, Thao Ngo and Joachim Meyer Order of Control and Perceived Control over Personal Information	Workshop III Room: 1.319 Alessandra Bagnato, Paulo Silva, Ala Sarah Alaqra and Orhan Ermis Privacy Challenges in Public and Private Organizations
12:45-13:00	Wrap up
13:00-14:00	Lunch
14:30-18:00	Social Event Short hike with guided discoveries in the Argovia Jurapark
19:00-21:00	Social Event Dinner in the Argovia Jurapark

Thursday, August 22, 2019

Time	Track I	Track II	Track III
9:15-10:15	Invited Talk VIII Session Chair: Michael Friedewald Room: AULA (Building 3) Marc van Lieshout (Radboud University, Interdisciplinary hub on Security, Privacy, and Data Governance, Nijmegen, NL) Privacy as Innovation opportunity
10:15-10:45	Coffee Break
10:45-12:45	Paper session IX: Privacy Preserving Technologies Session Chair: Stephan Krenn Room: AULA (Building 3) Teresa Anna Steiner Differential Privacy in Online Dating Meiqi He, Gongxian Zeng and Siu Ming Yiu Enhanced Oblivious Multi-Keyword Search Tom Lorenz and Ina Schiering Privacy in Location-Based Services and their Criticality based on Usage Context	Paper session X: Assessing Privacy Risks Session Chair: Tjerk Timan Room: 1.333 Jens Wettlaufer and Hervais Simo Decision Support for Mobile App Selection via Automated Privacy Assessment Salimeh Dashti and Silvio Ranise A Tool-Assisted Risk Analysis Approach for Data Protection Impact Assessment Jens Hjort Schwee, Fisayo Caleb Sangogboye and Mikkel Baun Kjærgaard Automatic Mapping of Privacy Vulnerabilities for Data Sharing based on Ontologies	Workshop IV Room: 1.319 Eva Schlehahn, Simone Fischer-Hübner, Rigo Wenning, Murmann Patrick and Farzaneh Karegar Interactive Focus Group GDPR-compliant Dynamic Consent Management
12:45-13:45	Lunch break
13:45-14:45	Invited Talk IX Session Chair: Melek Önen Room: AULA (Building 3) Carmela Troncoso (École polytechnique fédérale de Lausanne, Security and Privacy Engineering Lab, CH) When foes are friends: adversarial examples as protective technologies
14:45-15:00	Track Change Break
15:00-16:15	Paper session XI: Cybersecurity Session Chair: Simone Fischer-Hübner Room: AULA (Building 3) Michael Schmid, Karim Akarkach and Sebastian Pape Comparison of different aggregated information security control maturities from AHP ranked companies Alireza Shojaifar SMEs Confidentiality Issues and Adoption of Good Cybersecurity Practices		Tutorial II Room: 1.319 Monir Azraoui et al. Cryptography for Neural Networks
16:15-16:45	Coffee Break
16:45-17:45	Invited Talk X Session Chair: Melek Önen Room: AULA (Building 3) Angelo de Caro (IBM Research Zurich, Rüschlikon, CH) Privacy in the Blockchain
17:45-18:00	Wrap up

Friday, August 23, 2019

Time	Track I	Track II	Track III
9:15-10:15	Invited Talk XI Session Chair: Kai Rannenberg Room: AULA (Building 3) Nora Ni Loideain (University of London, Information Law and Policy Centre) Tackling Female Servitude by Default?
10:15-10:45	Coffee Break
10:45-11:45	Tutorial III Room: AULA (Building 3) Dalal Al-Azizy Deanonymisation Risk and the Impact of Artificial Intelligence	Tutorial IV Room: 1.333 Benjamin Bremert and Felix Bieker Freedom of information by design	Rump Session Session Chair: Diane Whitehouse Room: 1.319 Mohamed Abomhara How to do it right: Ethical, legal and societal challenges of biometrics
11:45-12:00	Best paper award ceremony
12:00-13:00	Impulse Talks and Panel Discussion Session Chair: Michael Friedewald Room: AULA (Building 3) Towards Privacy-Preserving Big Data Analytics Daniel Bachlechner on Towards Value-Centric Big Data Tjerk Timan on Privacy-Preserving Technologies Panel Discussion: Daniel Bachlechner (moderator), Karolina La Fors, Marc van Lieshout, Tjerk Timan, Diane Whitehouse, Haosheng Huang and Sabrina Kirrane
13:00-13:15	Closing of the Summerschool
13:15-14:15	Lunch

Invited Speakers

Jim Dratwa
Head of Secretariat, European Group on Ethics in Science and New Technologies.

Title: Ethics of Artificial Intelligence

Francien Dechesne
Assistant Professor in Algorithmic Decisions, Cybersecurity, and Ethics at Leiden University.

Title: Fair enough? On (avoiding) bias in data, algorithms and decisions

Vaclav Matyas
Professor of Cryptography and Cybersecurity at Masaryk University.

Title: Open tools for security

Christian Kunz
CEO of Bitsabout.me.

Title: Privacy and Convenience is not a Zero Sum Game – Design Lessons from an Operational Personal Data Marketplace

Nora Ni Loideain
Director and Lecturer in Law of Information Law and Policy at University of London.

Title: Tackling Female Servitude by Default?

Sanne Kruikemeier
Assistant Professor in Political Communication and Journalism, University of Amsterdam.

Title: Online Personalized Advertising

Angelo de Caro
Researcher in Cryptography and System Security, IBM Zurich.

Title: Privacy in the Blockchain

Carmela Troncoso
Assistant Professor in Secure and Privacy-Preserving Systems, EPFL.

Title: When foes are friends: adversarial examples as protective technologies

Michele Loi
Post-Doctoral Researcher, University of Zurich.

Title: Ethics of nudging privacy and cybersecurity online

Marc van Lieshout
Managing Director, iHub, Interdisciplinary Centre for Security, Privacy and Data Governance, Radboud University, Nijmegen.

Title: Privacy as Innovation opportunity

Kurt Tutschku
Professor of Telecommunications, Blekinge Institute of Technology.

Title: Flexible Secure Spaces for Cloud/Edge Computing

Daniel Bachlechner
Senior Researcher, Fraunhofer ISI.

Impulse Talk: Towards Value-Centric Big Data

Tjerk Timan
Strategy and Policy Researcher, TNO.

Impulse Talk: Privacy-Preserving Technologies

Best Student Paper Awards

Two Best Student Paper Awards were presented at the 14th IFIP Summer School on Privacy and Identity Management:

Shukun Tokas, Olaf Owe, and Toktam Ramezanifarkhani for Language-Based Mechanisms for Privacy by Design
Teresa Anna Steiner for Differential Privacy in Online Dating Recommendation Systems

Workshops and Tutorials

Co-designing a news diversity algorithmic model based on news consumers’ agency and fine-grained content modeling (Workshop)
Deanonymisation Risk and the Impact of Artificial Intelligence (Tutorial)
Freedom of information by design (Tutorial)
Interactive Focus Group Workshop on GDPR-compliant dynamic consent management (Workshop)
Oblivious Identity Management for Private User-Friendly Services (Workshop)
Preserving Privacy in Speaker and Speech Characterisation (Tutorial)
Privacy Challenges in Public and Private Organizations (Workshop)
SoK: Cryptography for Neural Networks (Tutorial)

Committee

General Chairs

Samuel Fricker (🇨🇭 FHNW Fachhochschule Nordwestschweiz)
Stephan Krenn (🇦🇹 AIT Austrian Institute of Technology)

Programme Chairs

Eva Lievens (🇧🇪 Ghent University)
Melek Önen (🇫🇷 EURECOM)
Michael Friedewald (🇩🇪 Fraunhofer ISI)

Steering Committee

Jan Camenisch (🇨🇭 Dfinity)
Marit Hansen (🇩🇪 ULD)
Anja Lehmann (🇨🇭 IBM Research – Zürich)
Ronald Leenes (🇳🇱 Tilburg University)
Simone Fischer-Hübner (🇸🇪 Karlstad University)
Diane Whitehouse (🇬🇧 The Castlegate Consultancy)
Charles Raab (🇬🇧 University of Edinburgh)
Kai Rannenberg (🇩🇪 Goethe University Frankfurt)

Programme Committee

Petra Asprion (🇨🇭 University of Applied Sciences Northwestern Switzerland)
Rocco Bellanova (🇳🇱 University of Amsterdam)
Felix Bieker (🇩🇪 Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein)
Michael Birnhack (🇮🇱 Tel Aviv University)
Franziska Boehm (🇩🇪 Karlsruhe Institute of Technology)
Sébastien Canard (🇫🇷 Orange Labs)
José M. Del Álamo (🇪🇸 Universidad Politécnica de Madrid)
Roberto Di Pietro (🇶🇦 Hamad Bin Khalifa University)
Josep Domingo-Ferrer (🇪🇸 Universitat Rovira i Virgili)
Gerard Draper Gil (🇮🇹 European Commission - Joint Research Centre (JRC))
Kaoutar Elkhiyaoui (🇫🇷 EURECOM)
Orhan Ermis (🇫🇷 EURECOM)
Simone Fischer-Hübner (🇸🇪 Karlstad University)
Pedro Freitas (🇵🇹 Universidade Católica Portuguesa)
Lothar Fritsch (🇸🇪 Karlstad University)
Gloria Gonzalez Fuster (🇧🇪 Vrije Universiteit Brussel)
Thomas Gross (🇬🇧 Newcastle University)
Marit Hansen (🇩🇪 Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein)
Meiko Jensen (🇩🇪 Kiel University of Applied Sciences)
Stefan Katzenbeisser (🇩🇪 University of Passau)
Reto Koenig (🇨🇭 Bern University of Applied Sciences)
Eleni Kosta (🇳🇱 Tilburg University)
Joachim Meyer (🇮🇱 Tel Aviv University)
Evgeni Moyakine (🇳🇱 University of Groningen)
Andreas Nautsch (🇫🇷 EURECOM)
Sebastian Pape (🇩🇪 Goethe University Frankfurt)
Norberto Patrignani (🇮🇹 Politecnico of Torino)
Robin Pierce (🇳🇱 Tilburg University)
Jo Pierson (🇧🇪 Vrije Universiteit Brussel)
Tobias Pulls (🇸🇪 Karlstad University)
Charles Raab (🇬🇧 The University of Edinburgh)
Kai Rannenberg (🇩🇪 Goethe University Frankfurt)
Kjetil Rommetveit (🇳🇴 University of Bergen)
Arnold Roosendaal (🇳🇱 Privacy Company)
Ina Schiering (🇩🇪 Ostfalia University of Applied Sciences)
Stefan Schiffner (🇱🇺 University of Luxembourg)
Daniel Slamanig (🇦🇹 AIT Austrian Institute of Technology GmbH)
Christoph Striecks (🇦🇹 AIT Austrian Institute of Technology GmbH)
Bibi Van Den Berg (🇳🇱 Leiden University)
Simone Van Der Hof (🇳🇱 Leiden University)
Marc van Lieshout (🇳🇱 TNO Information and Communication Technology)
Frederik Zuiderveen Borgesius (🇳🇱 Radboud University)
Harald Zwingelberg (🇩🇪 Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein)
Rose-Mharie Åhlfeldt (🇸🇪 University of Skövde)