Risks and Benefits of Emerging Life-Logging Applications November 2011 Final Report – Appendix I
Total Page:16
File Type:pdf, Size:1020Kb
Risks and benefits of emerging life-logging applications November 2011 Final Report – Appendix I TO L0G OR NOT TO L0G? Risks and benefits of emerging life-logging applications Appendix I Scenario Building and Analysis Template Risks and benefits of emerging life-logging applications 2 Final Report – Appendix I ABOUT ENISA The European Network and Information Security Agency (ENISA) is a European Union (EU) agency which acts as a centre of expertise for the EU Member States and European institutions. It gives advice and recommendations on good practice, and acts as a “switchboard” for exchanging knowledge and information. The agency also facilitates contacts between the European institutions, the Member States, and private business and industry. CONTACT DETAILS The report has been edited by Barbara Daskala. For questions related to this study or to the Emerging Risks Framework, please use the following details: e-mail: [email protected] Internet: http://www.enisa.europa.eu/ Legal notice Notice must be taken that this publication represents the views and interpretations of the authors and editors, unless stated otherwise. This publication should not be construed to be a legal action of ENISA or the ENISA bodies unless adopted pursuant to the ENISA Regulation (EC) No 460/2004 as lastly amended by Regulation (EU) No 580/2011. This publication does not necessarily represent state-of the-art and ENISA may update it from time to time. Third-party sources are quoted as appropriate. ENISA is not responsible for the content of the external sources including external websites referenced in this publication. This publication is intended for information purposes only. It must be accessible free of charge. Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information contained in this publication. Reproduction is authorised provided the source is acknowledged. © European Network and Information Security Agency (ENISA), 2011 Risks and benefits of emerging life-logging applications 3 3 Final Report – Appendix I Structure of the template The template is structured as follows: Introductory part, where the motivation, scope and objectives of the scenario is provided, as well as the approach and methodology to be used The Scenario description, including the following information: - Scenario type: explorative (what can happen) or predictive (what will happen) - Scenario raw description: this is where the scenario is described in free text. The intended text in italics provides more technical information on how certain activities are performed. These details are not necessarily those of which actors are fully aware as they happen in the background. - Assumptions: Any assumptions made while formulating the scenario. “Analysing the scenario” – This section contains a number of fields with information we would like to know to proceed with the risk assessment as a next step. It should be noted that this part of the template is the one populated first to provide the basic idea and components of the scenario, on which it will then expand on. The information presented there is thus more general and abstract and should be considered only as background information. Risks and benefits of emerging life-logging applications 4 Final Report – Appendix I To log or not to log? Risks and benefits of life-logging applications Annika, a professional mum, and Bennie, a self-employed dad, live together with their 12- year old son Christer and their 14-year old daughter Dana in Malmö, Sweden. Morning at home As the alarm goes off in the morning, Bennie grudgingly makes his way into the bathroom. The smart mirror that also allows his son Christer to play his favourite “Brushy” game (in which he competes with his friends on who brushes the teeth best) detects his composure using image recognition and gets ready to auto-blog his ritual “morning riser” message to his social network: After the system plays a little sound snippet from his wife saying “How are you today, Bennie?” his mumbled reply (“Ready to rock and roll!”) is simply submitted to an online speech-to-text service and then combined with one of four possible composure icons (as indicated by the image recognition system): grumpy, sleepy, fresh, or energized. As Bennie got a good night’s sleep, his icon is “energized” today. A glance to his “friend stream”, which is projected to the side of the bathroom mirror, shows him that Dan, his best friend, is also already up – though his night must have been short: Dan’s icons says “grumpy” and his message is “Don’t Ask!” Dana and Annika are already at the breakfast table when Bennie comes down, seemingly in a heated discussion. “Mom, I’m fine, really, it’s nothing!” Dana says, though Annika does not seem convinced by this. “She hasn’t posted any status updates for more than 2 weeks now”, Annika offers by way of explanation as Bennie looks at her inquisitively. “There must be some reason to it, I’m sure, but she won’t tell me.” Bennie tries to calm her down: “C’mon, Annika, if it wasn’t for my bathroom and my bike doing the updates for me, I wouldn’t be posting anything either. What’s the big deal?” As Annika gives him a “you-are-not-being-helpful” look, Dana quickly mumbles “I have to get ready for school” and slips upstairs. “Bennie, I’m just worried. What if she is being bullied? We really should talk to her teacher about this.” Bennie sees the worried look on Annika’s face and decides not to press his point: “OK, you know what? I’ll check on her as I walk her to the bus stop.” Annika seems to have more on her mind though: “I’m also worried about her working late at Krista’s house so often. She has been there practically every night last week, presumably to work on some school project. How do we know she is actually there working and not going out or something?” “Relax Annika, I remember checking her lifelog last week and she was definitely at Krista’s all of these days,” Bennie replies. “But how do you know she didn’t just leave her phone behind at Krista’s and go out the whole night?” Annika retorts. A good point indeed, Bennie must admit to himself. “Hmm, I guess you’re right. A few days ago I would have said there’s no way that Dana would move more than a few meters away from her phone, thus not being able to update her social network on her activities minute by minute. She would have sooner walked out of the house naked than without her phone! But if she stopped her updates as well…” “See? This is why this worries me…” Annika adds. Earlier that year Bennie had convinced Annika that they needed to give Dana a bit more freedom. Annika had been reluctant, but in the end Dana agreed that she would give her parents access to her location data in exchange for having more freedom to go out on her own. Maybe he shouldn’t have pushed so hard for this, Bennie now wonders. As Dana reappears a few minutes later with her school bag in hand, Bennie quickly finishes his coffee and offers to walk with her to the bus stop. Travel to work/school As Dana and Bennie step out of the house, Christer is just coming down to have breakfast. When he woke up this morning, he immediately saw that Einar, his best friend at school, Risks and benefits of emerging life-logging applications 5 5 Final Report – Appendix I had posted a “sick-at-home” message. “What fun is school if Einar isn’t there?” he thought and decided to stay home as well, yet his mother wouldn’t have any of it. While munching on his cereal and scanning his friendship streams, Christer’s mood suddenly rises rapidly: it seems that Freia is taking the bus today! Her Avatar is currently aboard the 983 from Staffanstorp, which means that she will be passing by his bus stop in less than 20 minutes from now! This is his chance to “accidentially” meet her on the bus! Since Christer had been keeping tabs on Freia for a few weeks now, he knows that her parents usually drive her to school. Maybe they’re busy today? While they aren’t friends yet and thus Christer shouldn’t know her location, it turns out that Freia didn’t yet change the default settings in their school’s social networking app! Luckily his school is using a self-hosted free networking software, rather than going with a commercial service as they do at his sister’s school. While his school apparently is saving money this way, having the informatics teacher double as the sysadmin already allowed Christer and his friends to run a number of “work-arounds” on the stupid class check-in service that they have to use in order to comply with attendance. In the same way, Christer simply befriended Gitte, one of Freia’s friends, in order to get access to all of Freia’s details, too! But maybe after today’s meeting on the bus, sending that “connect” request wouldn’t look like he likes her, right? Right! Annika is still a bit bewildered by her son’s sudden behavioural change – first he didn’t want to go to school at all, and now he absolutely must catch the earlier bus. Kids! Annika hears his footsteps running away as the front door slams shut, and she finally finds time to check on her own travel plans.