Focus on Innovation: Govtech and Metrolabs

Innovation of the Month

Do you know of an interesting project that involves local government and university partners? Fill out our nomination form to help inform our selection process for our Innovation of the Month Award by nominating a team (or yourself) for the honor.

Kansas City Takes Data-Driven Approach to Addressing Blight

MetroLab Network has partnered with Government Technology to bring its readers a segment called the MetroLab Innovation of the Month Series, which highlights impactful tech, data, and innovation projects underway between cities and universities. If you’d like to learn more or contact the project leads, please contact MetroLab at info@metrolabnetwork.org for more information.

 

The TTPs of Privacy and Security of the IoT

This article looks at the tactics, techniques, and practices (TTPs) that enable the management of security and privacy risks for IoT. Security professionals are likely familiar with this term of art in the context of cyber threat intelligence and incident response, only here has it been adapted it to help practitioners frame cyber security and privacy risk response for the IoT.

(E. Kenneally, “The TTPs of Privacy and Security of the IoT,” in IEEE Internet of Things Magazine, vol. 1, no. 2, pp. 8-11, December 2018. doi: 10.1109/MIOT.2018.8717595, available at https://ieeexplore.ieee.org/document/8717595).

Scratching Below the Surface: IoT Privacy Risk

Further to the topic of Privacy & Security for Smart Cities (E. Kenneally, “Scratching Below the Surface: IoT Privacy Risk,” in IEEE Internet of Things Magazine, vol. 1, no. 1, pp. 8-10, SEPTEMBER 2018. doi: 10.1109/MIOT.2018.8552484, available at https://ieeexplore.ieee.org/document/8717595):

This column delves into privacy risks of the IoT using risk concepts that are more native to the security domain in order to conceptually bridge our collective understanding, articulation, and management of privacy concerns in the IoT which otherwise might not be sufficiently considered or foreseen by existing legal and technical controls. It has become almost cliché that the so called Internet of Things (IoT) means different things to different people. When it comes to privacy and security risks, what is implicit across the myriad conceptualizations of IoT lies the key to unearthing why IoT risk heralds a difference with a distinction compared to traditional offline and online contexts. Critics of an exceptionalist view of IoT risk might contend that the IoT is really just distributed computing on steroids, i.e., the IoT is merely a relabeling and repackaging of technologies past like client-server, web services, SoA, mobile, virtualization, and distributed computing, which means that risk management is merely an exercise in grafting the decades-long understanding of privacy and security from those familiar contexts onto the IoT. Without getting into a religious debate, it is incontrovertible that there are advances in the quality and quantity of data collection from IoT technologies as opposed to previous generations of technology, and these are driven by real and prospective socioeconomic value propositions.

Smart CIty: Coral Gables Leader Raimundo Rodulfo

Welcome to Aspen’s Podcast – Episode 6 – Smart Cities and Communities – today’s guest is a distinguished Smart City / Community leader: Mr Raimundo Rudolfo, Director of Information Technology, Chief Information and Innovation Officer at the City of Coral Gables Florida. He’s successfully implemented many the Smart City initiatives and break new ground continuously.

He’s been able to apply new technology, gain support from stakeholders by using lean and efficient methods that free up capital and resources to apply to new initiatives.

His globally recognized benefits to the Citizens, businesses and stakeholders in his communities are generously shared through his presentations to Mayors, Community managers, Universities and Businesses.

He’s actively participating in leadership organizations, including the National Institute for Standards and Technology, Global City Teams Challenge organization. He’s a contributor to the GCTC Data supercluster as well.

I’m excited to share the discussion Raimundo and I had about Coral Gables and his series of successes. Welcome to Aspen’s Podcast Raimundo.

GCTC Tech Jam – 2019

GCTC Global Tech Jam 2019 | BroadbandUSA

Register here.The Global Cities Team Challenge (GCTC) Global Tech Jam brings together research institutions, private sector companies, grass roots organizations, and public entities to explore deployment of data-driven decisions and to benefit communities. This international consortium will discuss deploying emerging technologies to improve infrastructure and create conditions

 

Intelligent Privacy for Smart Cities

Join us at the upcoming Portland Tech Jam ’19 where we’ll present our forthcoming paper that addresses Smart Cities privacy and innovation challenges with pragmatic policy-informed technology solutions:  Look for the full article in the ACM Conference Proceedings (Isaac Potoczy-Jones, Erin Kenneally, John Ruffing, “Encrypted Dataset Collaboration- Intelligent Privacy for Smart Cities, SCC’19, September 2019, Portland, Oregon USA).  In summary:

The past year has seen increasing scrutiny of Smart Cities efforts with regard to privacy. Privacy advocates have criticized Smart City data collection on the whole and critiqued specific city efforts that they feel have crossed a line.

Cities are struggling with a number of privacy issues, including how to address third parties’ collection of Smart City data, how cities consume personally identifying information from third-parties, and how public records laws intersect with privacy concerns.

The majority of data that cities collect are subject to disclosure under public record laws, with an attendant obligation to anonymize sensitive private information. However, as the amount and availability of data increases, the ability to cross-reference, correlate, and de-anonymize or re-sensitize datasets also increases. This leads to re-identification attacks that infringe the privacy of individuals in those datasets, and fosters mistrust in city governments and technology vendors. A fundamental challenge is that open data and privacy interact in complex and unpredictable ways. Some cities may choose to allow third parties to collect and manage that data in an effort to encourage innovation in the delivery of city services, while simultaneously wrestling with the legal and policy implications, such as privacy and public records law compliance. Unfortunately, this also may have undesirable privacy outcomes depending on a third-party’s use of that data and the city’s role in encouraging its collection.

In this paper, we will discuss concrete approaches to smart cities data privacy governance including collection and management, and specifically, an innovative pilot project supported by the U.S. Department of Homeland Security, Science & Technology Directorate aimed at demonstrating how privacy technology can help harmonize data sensitivity risks with intended benefits.