Förderjahr 2021 / Projekt Call #16 / ProjektID: 5937 / Projekt: RESPECTeD-IoT
****
The RESPECTeD-IoT project, centered on enhancing data protection and user consenting within IoT environments, has been successfully completed. The initiative, conducted by the Sustainable Computing Lab and led by Asst. Prof. Dr. Soheil Human, aimed to tackle the multifaceted challenges of safeguarding personal data, balancing technical, legal, and human-compatibility aspects. The project's goal was to provide solutions that reinforce user agency and control over personal data in IoT systems.
A key outcome of the project was the development of the ADPC-IoT (Advanced Data Protection and Control for IoT), a technical specification designed specifically for IoT environments. Building upon the foundational ADPC framework, the specification formalizes the communication of privacy-related data and decisions between IoT devices and mobile applications. This allows users to better manage their digital rights and consent within these systems. The project also delivered functional prototypes, including mobile apps for both iOS and Android, which utilize Bluetooth Low Energy and web technologies to facilitate data management between users and data controllers. Additionally, a server-side script for ESP32 devices was developed, enabling seamless communication between devices.
The project directly benefited two primary groups: data subjects interacting with IoT systems and the data controllers managing them. The ADPC-IoT specification empowers users with more control over their digital rights, allowing them to actively manage their data protection and consent. For data controllers, the specification serves as a guide for aligning their systems with modern data protection requirements. Moreover, the project offers developers and innovators a solid technical foundation for implementing user-friendly, human-compatible digital protection solutions.
An important aspect of the project was its exploration of AI integration, with a particular emphasis on generative AI. This led to the creation of a Personal Digital Protection, Consenting, and Controlling Assistant System (PDPCAS), aimed at simplifying the process for users to manage their data protection and consent. A user study was conducted to validate the system’s usability, confirming that it effectively empowers users while assisting data controllers in navigating the complex legal and socio-cognitive dimensions of digital protection within IoT ecosystems.
The project’s results are available on https://www.netidee.at/respected-iot.
Soheil Human
Prior to his current position at the Vienna University of Economics and Business, Soheil conducted research and managed multidisciplinary projects in several universities and institutes, including Vienna University of Technology (TU Wien), Austrian Institute for Artificial Intelligence (OFAI), Research Studios Austria (RSA), etc. Besides his academic career, he has been coaching and consulting more than 40 start-ups and corporations. Moreover, he has been involved in diverse projects run by national and international NGOs or agencies, such as United Nations Industrial Development Organization (UNIDO).
Soheil is engaged in a broad portfolio of research aiming to empower humans and develop sustainable solutions in the digital economy. In his projects, he conducts multidisciplinary research on human needs & values, digital privacy, human-centric information systems and algorithmic accountability. Soheil Human applies a wide range of theories and methods from Philosophy, Cognitive & Information Economics, Conceptual & Computational Cognitive Modelling, Artificial Intelligence, and Semantic Web in his research. His other research interests involve digital rights, pluralism & epistemic disagreements, predictive processing, and socio-technical imaginaries.