IoT Big Data Security and Privacy Versus Innovation

In this paper, we address the conflict in the collection, use, and management of Big Data at the intersection of security and privacy requirements and the demand of innovative uses of the data. This problem is exaggerated in the context of the Internet of Things (IoT). We propose a three-part decomposition of the design space, in order to clarify requirements and constraints. To reach this final analysis, we begin by clarifying the challenges in the design space: 1) there is a little agreement on what is meant by IoT, and in particular the security and privacy implications of different definitions; 2) we then consider the requirement and constraints on the Big Data that result from various IoT system designs; and 3) in parallel, we examine the intricacies of the demand for innovation from both the legal and economic perspectives. In this context, we then can decompose the set of drivers and objectives for security/privacy of data as well as innovation into: 1) the regulatory and social policy context; 2) economic and business context; and 3) technology and design context. By identifying these distinct objectives for the design of IoT Big Data management, we propose that more effective design and control is possible at the intersection of these forces, through an iterative process of review and redesign.