Working and living in interactive environments - requirements for security and privacy

Interactive assistance systems collect, process, and produce personal data of its users. Such systems have in common that they infer the current state of a given task from multi-sensor exploitation of a scene, which is matched with static model knowledge and learned characteristics of the users. Another typical property is, that the users have only limited control over the data processing. In a smart home the user needs to trust in services providers, which are operated in the cloud. Interactive environments at the workplace are deployed and maintained by the employer. In this paper we analyze assistance systems from an IT security as well as from a data protection perspective to document similarities in different scenarios. The goal is to show how threats to the security of personal data can be minimized and how data protection principles can be operationalized in such systems to bring the user in control of data access and usage.