论文标题
私人委员会:保护公民隐私免受送货无人机的侵害
Privadome: Protecting Citizen Privacy from Delivery Drones
论文作者
论文摘要
随着电子商务公司开始考虑使用交付无人机进行客户履行,人们对公民隐私的关注日益加剧。无人机配备了摄像头,无论是半自治的还是完全自治的无人机,这些相机通常需要作为常规导航的一部分。本视频提要中可能会捕获地面公民的录像,从而导致隐私问题。 本文介绍了Privadome,该系统实现了以公民为中心的虚拟隐私圆顶的愿景。 Privadome旨在与负责监督无人机操作的城市规模监管机构集成,并通过两个组件PD-MPC和PD-ROS实现了这一愿景。 PD-MPC允许配备移动设备的公民识别捕获镜头的无人机。它使用安全的两党计算来实现此目标,而不会损害公民位置的隐私。 PD-ROS允许公民与此类无人机进行通信,并获得一条审核步道,以显示无人机如何使用镜头,并确定是否采取了保护隐私的步骤来消毒镜头。使用我们对PD-MPC和PD-ROS的原型实现对百货公司的实验评估表明,该系统扩展到近期的城市尺度交付无人机部署(数百个无人机)。我们表明,使用PD-MPC,公民移动设备上的移动数据使用情况与设备上的常规活动(例如流媒体视频)相当。我们还表明,PD-ROS的工作流程在我们的实验平台上消耗了适量的其他CPU资源和功率。
As e-commerce companies begin to consider using delivery drones for customer fulfillment, there are growing concerns around citizen privacy. Drones are equipped with cameras, and the video feed from these cameras is often required as part of routine navigation, be it for semi autonomous or fully-autonomous drones. Footage of ground-based citizens may be captured in this video feed, thereby leading to privacy concerns. This paper presents Privadome, a system that implements the vision of a virtual privacy dome centered around the citizen. Privadome is designed to be integrated with city-scale regulatory authorities that oversee delivery drone operations and realizes this vision through two components, PD-MPC and PD-ROS. PD-MPC allows citizens equipped with a mobile device to identify drones that have captured their footage. It uses secure two-party computation to achieve this goal without compromising the privacy of the citizen's location. PD-ROS allows the citizen to communicate with such drones and obtain an audit trail showing how the drone uses their footage and determine if privacy-preserving steps are taken to sanitize the footage. An experimental evaluation of Privadome using our prototype implementations of PD-MPC and PD-ROS shows that the system scales to near-term city-scale delivery drone deployments (hundreds of drones). We show that with PD-MPC the mobile data usage on the citizen's mobile device is comparable to that of routine activities on the device, such as streaming videos. We also show that the workflow of PD-ROS consumes a modest amount of additional CPU resources and power on our experimental platform.