DE102010019188A1 - Method for safe-guarding data privacy property rights in e.g. private home in passenger car, involves individually keeping detected data into independent data center, and running detected data in separate data pool - Google Patents

Abstract

The method involves individually keeping detected data into an independent data center (5), and running the detected data in a separate data pool. Collected data is initially accessed by a secure web portal and an Internet access and published according to a documented agreement of an intended user. Acquisition parameters for the detected data are adjusted by a remote access device through the Internet access and the secure web portal. Evaluations of the collected data are performed for marketplace distribution and typical use behaviors. An independent claim is also included for a device for safe-guarding data privacy property rights in private home and private sphere in a passenger car.

Description

State of the art

It is known that instruments of measurement and control technology can collect data locally and transfer it to a control center for the evaluation of the data.
[Reference: European Patent EP 0 877 997 B1 ]

Furthermore, it is known that adjustments can be made to the measurement and control technology from the control center on the long-distance transmission path.

Furthermore, it is known that evaluations of data can be provided centrally and retrieved on decentralized interrogation devices via suitable networks.
[Reference: European Patent EP 0 877 997 B1 ]

Problem Description

The invention specified in the claims 1-18 is based on the problem that with the application of the aforementioned prior art can not be taken into account the additional data privacy requirements with regard to the autonomous and voluntary disposition concerning him data.

These requirements arise from national and international laws (Federal Data Protection Act, EU Directive 95/46 / EC ) and form part of the fundamental human rights.

For further understanding, it is important to understand that the data stored temporarily or permanently in a sensor, meter or actuator may be accompanied by a behavioral control of the person who decreases the measured power, retrieves the condition control of the sensor or triggers the functioning of the actuator. The identity of the device, its communication terminal or the knowledge of the geographical location of installation or location makes it possible to relate to a single person or group of persons to whom the behavior can be attributed. These people are referred to as "concerned".

It does not depend on the fact that the personal reference is actually made, but that it is basically possible.

Now, a sensor, measuring device or actuator is usually installed to fulfill a legal transaction, for the processing of which the operator desires the information obtained. The invention therefore refers to an "intended recipient" who claims at least part of the information from the data on the basis of a legal transaction or statutory requirement.

Now, the existing legal situation, the data collected in the property of the data subject and their collection and transmission, in principle, as well as the nature and extent, with prohibition with permission. The data subject should be informed in principle and be able to voluntarily agree to the recording and the individual transmission, but also be able to withdraw this consent with immediate effect and for the future.

The currently unresolved, economically relevant problem prevails, both from the report of the ULD from September 2009
[Source: https://www.datenschutzzentrum.de/smartmeter/20090925-smartmeter.pdf ]
as well as from the BNetzA report of 10 March 2010 on "Competitive development and trade options in the field of metering and metering and variable tariffs" [Source: http://www.bundesnetzagentur.de/cae/servlet/contentblob/151968/publicationFile/6321/BerichtZaeh1Messwesenpdf.pdf ]
and the standardization roadmap Smart Grids of the DKE in DIN and VDE from April 23, 2010
[Source: http://www.e-energy.de/documents/DKE_Roadmap_Smart_Grid_230410_Deutsch.pdf ]
exquisite.

solution

This problem is solved by the features listed in the claims 1-18.

The advantages achieved by the invention are, in particular, that the area of access of the person concerned is extended from his private rooms to a data center, ie the data does not fall directly within the sovereignty of the intended recipient, but first lands in an independent clearing center.

There, the data are initially available only to the person concerned himself, with far-reaching possibilities for the evaluation, adjustment of the recording devices, passing on or deletion are offered via a web portal.

A transfer to the intended recipient only takes place if the person concerned previously gave his consent, as a rule or in individual cases.

functional sequence

The invention first makes sure that the data of the sensor ( 1 ), Measuring device ( 2 ) or actor ( 3 ), possibly using the Bundling and firewall function of a router ( 4 ), via a long-distance connection ( 16 ) End-to-end encrypted in the data center ( 5 ) of the Clearing Center.

If a router ( 4 ) is also used for the connection ( 15 ) between routers ( 4 ) on the one hand and sensor ( 1 ), Measuring device ( 2 ) and / or actuator ( 3 ) on the other hand ensure adequate encryption.

In the data center, a query ( 18 ) at the directory service ( 6 ) that this data is assigned to the right person and stored in its exclusive data store ( 7 ) stored ( 18 ) become.

The person concerned can now use an interrogator ( 8th ) via the Internet with the web portal ( 23 ) of the Clearing Center ( 21 ), where it is first authenticated with the state of the art means ( 12 ), again the directory service ( 6 ) is being used. The individual access and instructions given by the person concerned are stored in a change history ( 22 ) recorded continuously.

In individual cases or on the basis of a set rule, the data subject should extract a data extract from his exclusive data memory ( 7 ) for transmission into the data storage of the intended recipient ( 9 ), this pending transmission ( 19 ) previously via web portal ( 23 ) or E-Mail ( 24 ) to its interrogator ( 8th ), where he expressly agrees to the transfer or by means of a rule 25 ). A system rule ( 13 ) prevents the execution of a transfer, as long as the consent of the person concerned does not exist.

On the web portal ( 23 ), the data subject will continue to be provided with applications that 7 ), can independently compile reports or data extracts, and then compile them via the connection ( 21 ) to its interrogator ( 8th ) can download. He may also, from here, schedule periodic reports, either at his own time or at his designated destination (s) at 9 ) and can be deployed.

Finally, the person affected by the web portal ( 23 ) from the settings for capturing or transmitting the data from sensor ( 1 ), Memory measuring device ( 2 ) or actuator ( 3 ), as well as the settings of the router ( 4 ) change. These instructions are then sent via the long-distance route ( 16 ) to the relevant components ( 1 . 2 . 3 . 4 ) and monitor the confirmation message. In the event of an error, the instruction is sent again, if permanently prevented, an e-mail ( 24 ) to the person concerned and / or other recipients deposited by him such. B. triggered the Entstördienst.

A function ( 14 ) for evaluation in the exclusive data memories ( 7 ) first forms a data extract provided with qualifying indicator ( 10 ), which is thereby shortened by the identifiable identifiers - thus anonymized - and then summarized in groups and if necessary combined into aggregate values - that is aggregated - becomes. The evaluation function ( 14 ) allows the inclusion of individual exclusive data stores ( 7 ) depending on the prior consent of the person concerned.

The under the evaluation function ( 14 ) and data extract, the evaluation will be made available to interested third parties, irrespective of any further consent of the data subject ( 11 ) provided ( 20 ).

All in the data center ( 5 ) located functions, transmission paths and system components are in accordance with the current state of the art in particular under the claims of data security such. B. in the ISO 27001 set out, pronounced. The data center itself should be mirrored in independent locations.

The transmission links ( 19 . 21 ) from the data center ( 5 ) to the interrogator ( 8th ) of the person concerned and the intended recipient ( 9 ) are secured with the prior art encryption mechanisms end-to-end.

LIST OF REFERENCE NUMBERS

1

sensor

2

Integrated memory measuring device

3

actuator

4

router

5

Data Center

6

directory service

7

separate data storage per user

8th

Data query device of the user

9

Data storage of the intended recipient

10

Data storage with anonymized and aggregated data

11

report

12

authentication

13

Authorization check for the transfer

14

Method for anonymous evaluation

15

Local connection

16

Wide area connection

17

mapping function

18

Einspeicherungsfunktion

19

output function

20

output function

21

Wide area connection

22

change history

23

Web portal

24

electronic mail

25

Effect of explicit consent

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• EP 0877997 B1 [0001, 0003]

Cited non-patent literature

• EU Directive 95/46 / EC [0005]
• https://www.datenschutzzentrum.de/smartmeter/20090925-smartmeter.pdf [0010]
• http://www.bundesnetzagentur.de/cae/servlet/contentblob/151968/publicationFile/6321/BerichtZaeh1Messwesenpdf.pdf [0010]
• http://www.e-energy.de/documents/DKE_Roadmap_Smart_Grid_230410_English.pdf [0010]
• ISO 27001 [0024]

Claims (18)

Method and device for ensuring the data protection rights of data subjects affected in the application of remote-controlled measurement and control systems in private households or other private spheres of influence such. B. in the passenger car, characterized in that the collected data initially enter an independent data center and are held there until the release of the person concerned individually as a separate data pool. A method according to claim 1, characterized in that the recorded data are initially accessible only to the person concerned via a secure Internet access and web portal. A method according to claim 1 and 2, characterized in that the data are issued only after documented consent of the person concerned to the intended user. A method according to claim 1 and 2, characterized in that the data in the independent data center with the means of anonymization and aggregation are reliably separated from the personal reference to the person concerned and then fed to an evaluation. A method according to claim 1, 2 and 3, characterized in that the person concerned can grant the required according to claim 3. Release via the defined in claim 2. Internet access with web portal. A method according to claim 1, characterized in that the person concerned can enter the detection parameters for the data on the defined according to claim 2. Internet access with web portal and thereby set by remote access in the detection device. A method according to claim 1 and 2, characterized in that the person concerned on the web portal according to claim 2. Applications are provided for the evaluation of his data. A method according to claim 7, characterized in that these applications can be provided to the person concerned in the name and appearance of the intended user, but without the intended user already knows the data presented in the application before or during the evaluation. He can get this only after an approval according to claim 3. A method according to claim 1 and 2, characterized in that a person concerned after changing his residential unit, other form of privacy or the contractor as the intended user for proof of identity can take over the data derived from his previous contract relationship data in the current record. A method according to claims 1, 2 and 3, characterized in that the data subject from contractual obligations necessary data extracts are prepared, and before the registration date the person concerned one or more electronic notifications with the request for consent to their transfer to the intended recipient according to claim 3. be sent. The method of claim 1, 2 and 7, characterized in that the data subject independently collected and / or evaluated for him data from the web portal according to claim 2. can download and continue to use. The method of claim 1, and 2, characterized in that the person concerned can perform the deletion of the data stored for him via the web portal according to claim 2. Method according to claims 1, 2, 3, 5, 6, 9, 11 and 12, characterized in that consents and changes to the instruction of the person concerned are continuously logged. Method according to claims 1, 2 and 4, characterized in that from the anonymous entirety of all data according to claim 4. evaluations of the market distribution and the typical user behavior are performed. A method according to claim 1, characterized in that the connection between the household or the other form of privacy and the independent data center via any long-distance transmission link, z. B. as a dial-up line, as a mobile radio connection, as a radio link, on the Internet or modulated on power lines takes place. Method according to Claims 1 and 15, characterized in that the connection between the remote-controlled measurement and control system and the communication unit (router) required for the wide-area connection according to Claim 15 is arbitrary, for example as cable, as optical connection, as a radio link or inductive, can be pronounced. A method according to claim 2, characterized in that the person concerned gets the web portal displayed on stationary or mobile terminals. Method according to claims 1 to 17, characterized in that all technical measures are secured at a high level according to the current state of safety technology.

Images