A User-Centric Privacy Control Framework for Decentralized IoT Platforms

We propose a sticky-policy based distributed privacy control system, namely BRAIN-IoT Privacy Control System, under strict compliance with General Data Protection Regulation (GDPR). It empowers users to set privacy policies and decide how the data should be managed. Furthermore, the proposed architecture aims to offer policy matching services to continuously and automatically enforce privacy protection in fully decentralized Internet of Things (IoT) environments i.g., the BRAIN-IoT platform, which focuses on the interoperability between heterogeneous IoT systems and secure data transmission. We validate the BRAIN-IoT Privacy Control System in real-life large-scale public events. Experiments results show that the system can quickly perform match checking of the privacy policies transmitted with personal data.