Managing Privacy and Trust in P2P Communication v. 0.7 Privacy, Economy and Trust in P2P Content Distribution

Types of Communication We look at three types of communication: –Person-to-person communication Examples: IM, , VoIP, SMS/MMS –Group communication Sharing information in a group Example: Private comments and annotations on business news shared with selected other users –Broadcast (Commercial) content distribution Example: News service where users comment items publicly thus becoming content creators

P2P Communication P2P can offer radically new possibilities for all forms of communication (broadcast, group, person-to-person): –Lower transaction costs (users pay for it) –Better geographical reach (users act as routers) –Better service availability (no single point of failure)

We Need Privacy and Trust Who are we communicating with? How do we protect the privacy of each user’s communication and communication patterns? Who do we trust as a source of information? How do a convince others that I am trustworthy? How is trust (karma) gained? How is trust different if the source is an individual or a community? Is the information received from others received intact? How to balance privacy with the need for earning trust? Can we solve some privacy and trust problems by creating vs. depriving economic incentives for good vs. bad behaviour?

Trust Model We have the technology for enforcing many of these issues, but they are all governed by a trust model. How is this model gained? From outside the system: –The person communicating knows the other party and knows they are trustworthy –Social filtering The system learns/deduces the trustworthiness –Devices in close proximity are likely to participate in a meeting –Communication history (# of past successful/failed transactions) determines the degree of trust

Trust Models for P2P Some of the above problems already have a centralised solution In a P2P environment, we need a distributed solution for trust modelling –General solution is a tough nut to break –Instead, we propose studying trust and privacy through studying progressively broadcast, group, and person-to-person communication integrated as a single focused “communications gadget”

Project Proposal Three-year project –4 researchers –Annual budget of ~270 k€ E.g., 4 companies, ~15 k€ each per year Deliverables –Insight into P2P, novel solution concepts –Sequence of demonstration prototypes year 1: P2P “broadcast” year 2: year 1 + P2P group communication year 3: year 2 + P2P VOIP or P2P IM –Scientific publications, theses

Progression Each year focuses on a new theme and builds on the previous years –Uses results from STAMI project as baseline Co-operation with other research institutes –Example: economic issues with Berkeley Goal: communication management is done with minimal user interaction –We automate most of the tasks –The remaining ones are integrated in the work flow

Year 1: Broadcast Communication Baseline: STAMI demonstration prototype for simple P2P content distribution Extensions: –User-originated annotations, karma, … Focus: Users as P2P broadcasters –How to enable user-originated information to be distributed effectively in a P2P network? –How to motivate users to donate bandwidth and battery resources to other users? –How to prevent / discourage unwanted use? –How to preserve privacy while enabling trust building?

Year 2: Group Communication Baseline: Year 1 Extensions: –Discussions limited to a group –Group management Focus: Managing group membership –How do we create, manage and dissolve a group in an ad-hoc situation? –How do we manage different group members rights to participate in communications? –Example: sharing contact information and presentation material with all parties in this meeting

Year 3: Person-to-Person Communication Baseline: Year 2 Extensions: –Some person-to-person communication facility (P2P VOIP, P2P IM, …), preferably on the basis of an existing open source solution Focus: Identity sharing and management –How can the different communication channels (broadcast, group, person-to-person) share user identities? –How to manage the various rights associated with various identities?