TRAPEZE - TRAnsparency, Privacy and security for European citiZEns

Informazioni relative al progetto

TRAPEZE

ID dell’accordo di sovvenzione: 883464

DOI

10.3030/883464

Progetto chiuso

Data della firma CE 4 Maggio 2020

Data di avvio 1 Settembre 2020

Data di completamento 31 Agosto 2023

Finanziato da

• Secure societies - Protecting freedom and security of Europe and its citizens

Costo totale

€ 6 017 950,00

Contributo UE

€ 4 995 812,50

Coordinato da

TENFORCE
Belgium

CORDIS fornisce collegamenti ai risultati finali pubblici e alle pubblicazioni dei progetti ORIZZONTE.

I link ai risultati e alle pubblicazioni dei progetti del 7° PQ, così come i link ad alcuni tipi di risultati specifici come dataset e software, sono recuperati dinamicamente da .OpenAIRE .

Risultati finali

Documents, reports (31)

Policy Language - First version

Syntax and semantics of the extended policy language taking into account the feedback of use cases, plus a complexity analysis pointing out the possible intractability of some reasoning tasks.

Citizen-centric use case scenarios - First version

Document detailing the use cases and data sharing scenarios provided by TRAPEZE partners.

Integrated platform testing - Second version

The results of the integrated platform testing will be documented and used to inform future releases of the platform

Security & Privacy Awareness and Competence Testing - First version

A report on the results of security and privacy awareness and competence testing with the different participant groups

TRAPEZE clustering and networking - Second version

Report on the TRAPEZE clustering and networking activities with a short assessment of the impact

Sticky Policies - First version

Tamper-proof encoding and storage of the links between data and policies.

Roadmap for dissemination and communication

List of planned activities, their description, place, date and specific target audiences as well as the partners responsible

Usability and accessibility testing report - Second version

A report on the results of usability and accessibility testing with the different participant groups

Use case evaluation, user feedback, and lessons learnt - First version

Report on the pilot evaluations and user feedback along with methodological guidelines for future implementations

Report on IPR/Exploitation activities and plan

Report summarizing the results of the IPExploitation workshops

Usability and accessibility testing report - First version

A report on the results of usability and accessibility testing with the different participant groups

Security & Privacy Awareness and Competence Testing - Second version

A report on the results of security and privacy awareness and competence testing with the different participant groups

Privacy preferences and sociological aspects analysis - Second version

A report on the results of the survey on privacy preferences and sociological considerations in privacyenhancing solution design

Privacy preferences and sociological aspects analysis - First version

A report on the results of the survey on privacy preferences and sociological considerations in privacyenhancing solution design

Citizen-centric use case scenarios - Second version

Document detailing the use cases and data sharing scenarios provided by TRAPEZE partners.

Security and Privacy Resilience Framework and Guidelines - Second version

This document will include the requirements for and subsequent definition of the TRAPEZE security and privacy resilience framework as well as the guidelines for its application in relevant environments

Standardization activities

Report on W3C standardization activities in terms of security and privacy vocabularies and taxonomies

Data Protection Requirements - Second version

The Report includes a depiction of legal and technical data protection fundamentals and the derived requirements for the project and its use cases.

Integrated platform testing - First version

The results of the integrated platform testing will be documented and used to inform future releases of the platform

Platform specification and design - Second version

Report on technical requirements and challenges T14 that arise in extending the SPECIAL concepts to cope with TRAPEZE requirements while ensuring scalability and security

Policy Language - Second version

Syntax and semantics of the extended policy language taking into account the feedback of use cases plus a complexity analysis pointing out the possible intractability of some reasoning tasks

Public penetration/hacking challenges - First version

Definition of the activities to perform during the public penetration and hacking challenges and of the expected results Reporting of the results

TRAPEZE clustering and networking - First version

Report on the TRAPEZE clustering and networking activities with a short assessment of the impact

Collaboration with DPAs, CERTs, CSIRTs

The report provides information on input provided lessons learned and core outcomes of the meetings with DPAs and CERTsCSIRTs Depending on the requests of the collaboration partners the report may be supplemented by a confidential section

Engine scalability properties - First version

A report on the scalability tests applied to the compliance engines released in D24 and D29

Security and Privacy Resilience Framework and Guidelines - First version

This document will include the requirements for and subsequent definition of the TRAPEZE security and privacy resilience framework, as well as the guidelines for its application in relevant environments.

Engine scalability properties - Second version

A report on the scalability tests applied to the compliance engines released in D24 and D29

Public penetration/hacking challenges - Second version

Definition of the activities to perform during the public penetration and hacking challenges and of the expected results Reporting of the results

Platform specification and design - First version

Report on technical requirements and challenges (T1.4) that arise in extending the SPECIAL concepts to cope with TRAPEZE requirements while ensuring scalability and security.

Data Protection Requirements - First version

The Report includes a depiction of legal and technical data protection fundamentals and the derived requirements for the project and its use cases.

Transparency and compliance checking algorithms - Second version

Efficient algorithms for compliance checking and explanations supporting the extended policy language described in D21

Other (16)

Citizen-centric help desk - First version

One-stop-shop for citizens and their security and privacy related questions, training, and incident reporting and recovery

Sticky Policies - Second version

Tamper-proof encoding and storage of the links between data and policies.

TRAPEZE platform - Second version

Integrated platform releases, with the initial one delivering early integration of the semantic blockchain layer and privacy dashboards and allowing an early evaluation of the developments in WPs 2, 3, and 4. The final release will deliver authentication and authorization, risk management and incident reporting, more mature components, and the first integration with the PDI.

Citizen-centric help desk - Second version

One-stop-shop for citizens and their security and privacy related questions, training, and incident reporting and recovery

Dynamic consent mechanisms - First version

This deliverable will provide an overview and implementations of different approaches to dynamic consent acquisition

Compliance and explanation engines - First version

SW release of the compliance engine with the features of the policy language (D2.1 and D2.6) and implementing the algorithms (D2.3 and D2.8).

Compliance and explanation engines - Second version

A report on the scalability tests applied to the compliance engines released in D2.4 and D2.9.

TRAPEZE Security and Data Protection knowledge base - First version

Multilingual knowledge base content RDF vocabularies and accompanying report

Privacy dashboards - Second version

The first release of the privacy dashboards will deliver early policy control and transparency and compliance interfaces. This will be followed by risk management and incident reporting interfaces and overall more robust solutions based on the citizens’ feedback.

Dynamic consent mechanisms - Second version

This deliverable will provide an overview and implementations of different approaches to dynamic consent acquisition.

TRAPEZE platform - First version

Integrated platform releases with the initial one delivering early integration of the semantic blockchain layer and privacy dashboards and allowing an early evaluation of the developments in WPs 2 3 and 4 The final release will deliver authentication and authorization risk management and incident reporting more mature components and the first integration with the PDI

Securing citizens smart terminals and online communication - First version

Definition of the citizen’s interactions with the platform via smart terminals, as well as identification and implementation of the protection mechanisms through KMS SDK. The reports will also clearly outline the features unique to TRAPEZE or common with the other projects (GEIGER and CitySCAPE)

TRAPEZE Security and Data Protection knowledge base - Second version

Multilingual knowledge base content, RDF vocabularies, and accompanying report.

Privacy dashboards - First version

The first release of the privacy dashboards will deliver early policy control and transparency and compliance interfaces This will be followed by risk management and incident reporting interfaces and overall more robust solutions based on the citizens feedback

Transparency and compliance checking - First version

Efficient algorithms for compliance checking and explanations, supporting the extended policy language described in D2.1.

Securing citizens smart terminals and online communication - Second version

Definition of the citizen’s interactions with the platform via smart terminals, as well as identification and implementation of the protection mechanisms through KMS SDK. The reports will also clearly outline the features unique to TRAPEZE or common with the other projects (GEIGER and CitySCAPE)

Websites, patent fillings, videos etc. (4)

Project identity kit and web presence - Second version

Project logo colours poster presentation and deliverable templates and guidelines on the usage for dissemination and communication along with a project website The poster will be updated in M24 with relevant developments and results

Project communication material - Second version

TRAPEZE project brochures leaflets and posters To be updated in M24 with relevant developments and results

Project communication material - First version

TRAPEZE project brochures, leaflets and posters. To be updated in M24 with relevant developments and results.

Project identity kit and web presence - First version

Project logo, colours, poster, presentation and deliverable templates, and guidelines on the usage for dissemination and communication, along with a project website. The poster will be updated in M24 with relevant developments and results.

Demonstrators, pilots, prototypes (2)

Use case implementation - Second version

Document detailing the implementation plans, integration activities, difficulties, and final results.

Use case implementation - First version

Document detailing the implementation plans integration activities difficulties and final results

Pubblicazioni

Conference proceedings (6)

Tractable Compliance Checking with Negation

Autori: Piero A. Bonatti, Luigi Sauro
Pubblicato in: Proceedings of the 34th International Workshop on Description Logics DL2021, 2021, ISSN 1613-0073
Editore: CEUR-WS.org

Can We Effectively Use Smart Contracts to Stipulate Time Constraints?

Autori: T. Eichinger and M. Ebermann
Pubblicato in: IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), 2022
Editore: IEEE
DOI: 10.1109/dapps55202.2022.00010

Representing Consent and Policies for Compliance

Autori: Piero A. Bonatti, Luigi Sauro, Jonathan Langens
Pubblicato in: {IEEE} European Symposium on Security and Privacy Workshops, EuroS{\&}P 2021, Vienna, Austria, September 6-10, 2021, 2021, Pagina/e 283--291, ISBN 978-1-6654-1012-0
Editore: IEEE
DOI: 10.1109/eurospw54576.2021.00036

Distributed Data Minimization for Decentralized Collaborative Filtering Systems

Autori: Tobias Eichinger and Axel Küpper
Pubblicato in: Proceedings of the 24th International Conference on Distributed Computing and Networking (ICDCN ’23), 2023, Pagina/e 140-149, ISBN 9781450397964
Editore: Association for Computing Machinery
DOI: 10.1145/3571306.3571400

Sticky Policies in OWL2: Extending PL with Fixpoints and Transitive Closure

Autori: Piero A. Bonatti, Luigi Sauro
Pubblicato in: Proceedings of the 19th International Conference on Principles of Knowledge Representation and Reasoning, 2022, Pagina/e 73-80, ISBN 978-1-956792-01-0
Editore: IJCAI Organization
DOI: 10.24963/kr.2022/8

t.ex-Graph: Automated Web Tracker Detection Using Centrality Metrics and Data Flow Characteristics

Autori: Raschke, P.; Herbke, P. and Schwerdtner, H.
Pubblicato in: Proceedings of the 9th International Conference on Information Systems Security and Privacy, 2023, Pagina/e 199-209, ISBN 978-989-758-624-8
Editore: SciTePress
DOI: 10.5220/0011787300003405

Other (1)

Using DPVCG's outcome in TRAPEZE's compliance framework

Autori: Bonatti, Piero A.; Sauro, Luigi; Langens, Jonathan
Pubblicato in: Numero 1, 2021
Editore: Author
DOI: 10.5281/zenodo.6461390

Peer reviewed articles (1)

Real-time reasoning in OWL2 for GDPR compliance

Autori: Piero A. Bonatti, Luca Ioffredo, Iliana M. Petrova, Luigi Sauro, Ida R. Siahaan,
Pubblicato in: Artificial Intelligence, 2020, Pagina/e Volume 289,, ISSN 0004-3702
Editore: Elsevier BV
DOI: 10.1016/j.artint.2020.103389