New technologies raise serious doubts on privacy and security

Monday, November 12, 2012

Pierluigi Paganini

03b2ceb73723f8b53cd533e4fba898ee

(Translated from the original Italian)

Today a colleague alerted me on a news published on-line related to a patent obtained by Microsoft titled "CONTENT DISTRIBUTION REGULATION BY VIEWING USER"

The patent could, according to some experts, a clear violation of privacy because it uses technology to gather information on user's consumption of video content.

The major concerns are related to the use of cameras of video devices such as PC, mobile devices and TVs to identify the user and verify its rights for vision and of course to determine his habits with the purpose to pack it for the best offer in terms of contents.

How does Microsoft will use the cameras?

There are several technologies that can serve the purpose, probably using "facial recognition techniques" combining with analysis of video and audio input.

The patent states:

 "[0028] In an alternative embodiment, a fee can be charged for each viewer of the content for each view. In another alternative, at 225 and 240, a per-viewer license may comprise counting the number of viewers in a viewing area and directly charging for each identified user in the viewing area. Viewers may be uniquely identified and a count of the viewers determined, with the licensee then charged for each viewer accessing the content. Age and identity restrictions can be applied in this embodiment as well. "

The cameras could be used to validate user's license and enabling content vision, they must be able to count the number of users present in front of video. The patent authorizes a private company to get so invasive in our homes and maybe this is the first of different similar cases.

TV, PC and gaming console are object technological extremely evolved that thanks to sensors, cameras and microphones are able to operate a meticulous control of the surroundings.

Last year I presented a project funded by the U.S. government to acquire information through the analysis of gaming console on the network.

There are several problems with patents like the one under discussion.

Who will govern the information obtained and how?
Are these devices secure from external attacks?
Who guarantees the security of information collected?

The doubts are raised mainly by the implementation of the content of the patent, let's image for example what could happen if an hacker takes control of such devices. It will be able to spy on victims, and similar attacks represent serious risks from different perspective.

Governments, but also cybercriminals could be interested to exploit the devices, same interest is from a commercial perspective to gather information on user's habits.

The patent applies to both streaming content as well as downloaded material, and it is sure that many other companies are interested in the technology.

I personally think the technology is ripe for several similar uses but to be really useful it always have to compare with the demands of privacy and safety of users ... unfortunately the trade goes in the opposite direction.

Pierluigi Paganini

References

http://securityaffairs.co/wordpress/10183/security/new-technologies-raise-serious-doubts-on-privacy-security.html

Possibly Related Articles:
7938
General Privacy
Information Security
Microsoft Privacy Information Technology Tracking
Post Rating I Like this!
35d93e1eda881f6e3dde4e87428a975e
Michael Johnson You forgot to ask the more pertinent question: Why would 'consumers' put up with this? It's tantamount to sticking a surveillance camera in their living rooms to enforce the law.
1352832007
03b2ceb73723f8b53cd533e4fba898ee
Pierluigi Paganini Hi Michael, you know me, and you know that I haven't forgotten it. I just tried to be impartial but I agree with you
Regards
PL
1352837659
The views expressed in this post are the opinions of the Infosec Island member that posted this content. Infosec Island is not responsible for the content or messaging of this post.

Unauthorized reproduction of this article (in part or in whole) is prohibited without the express written permission of Infosec Island and the Infosec Island member that posted this content--this includes using our RSS feed for any purpose other than personal use.