taxonomy of private data types

[schnelle]

Data that is used in the personal assistant and transferred is at least of the following typies

• data is shared between you and the entity in a trust relationship
• Data is shared but there's no trust relationship, generic cloud-based assistant
• no data is shared as it is not needed to work
• data is only kept embedded

Check for a taxonomy of private data from security and trust researn.

[dadahl]

Even if there is a trust relationship you can still be attacked. That's why cryptography is really important.
How can the assistant do its job with only embedded data?

[schnelle]

Review on 2024-11-06

• Add a section after section 4 talk about privacy

[nwhysel]

Do assistants contain credential wallets in the same way that other devices like mobile phones and computers do? Kantara FIRE WG was exploring this for identity credentials and developed a JSON statement to be stored on the SIM card. We called it Mobile Authentication Authorization Statement (MAAS). It allows for storage of unique, sensitive data on a device that could be accessed by authorized verifiers. docs.kantarainitiative.org/Kantara Mobile Assurance Statement 1_0_0 draft v2 FIRE final Oct 27%5ELJ 20.html <https://docs.kantarainitiative.org/Kantara%20Mobile%20Assurance%20Statement%201_0_0%20draft%20v2%20FIRE%20final%20Oct%2027%5ELJ%2020.html>

…

On Wed, Nov 6, 2024 at 11:17 AM Dirk Schnelle-Walka < ***@***.***> wrote: Review on 2024-11-06 - Add a section after section 4 talk about privacy — Reply to this email directly, view it on GitHub <#60 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAYKDR6QF64KM4UHVW7K37TZ7I6IXAVCNFSM6AAAAABNUSHJG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRQGIYTENJQGA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Noreen Whysel ***@***.*** http://www.whysel.com

[GerardChollet2]

I see [ https://academicworks.cuny.edu/ny_pubs/925/ | https://academicworks.cuny.edu/ny_pubs/925/ ] Thanks for the link ! Best, Gérard ​​_____________________________________________________________________ Gérard ***@***.*** Institut Polytechnique de Paris, IMT-TSP, 9 rue Charles Fourier, 91011 Evry Tel: +33 1 75319628 , http://perso.telecom-paristech.fr/~chollet/

…

_____________________________________________________________________ De: "nwhysel" ***@***.***> À: "w3c" ***@***.***> Cc: "Gerard CHOLLET" ***@***.***>, "Assign" ***@***.***> Envoyé: Mercredi 6 Novembre 2024 18:01:22 Objet: Re: [w3c/voiceinteraction] taxonomy of private data types (Issue #60) Do assistants contain credential wallets in the same way that other devices <br> like mobile phones and computers do? <br> <br> Kantara FIRE WG was exploring this for identity credentials and developed a <br> JSON statement to be stored on the SIM card. We called it Mobile <br> Authentication Authorization Statement (MAAS). It allows for storage of <br> unique, sensitive data on a device that could be accessed by authorized <br> verifiers. docs.kantarainitiative.org/Kantara Mobile Assurance Statement <br> 1_0_0 draft v2 FIRE final Oct 27%5ELJ 20.html <br> &lt;https://docs.kantarainitiative.org/Kantara%20Mobile%20Assurance%20Statement%201_0_0%20draft%20v2%20FIRE%20final%20Oct%2027%5ELJ%2020.html&gt; <br> <br> On Wed, Nov 6, 2024 at 11:17 AM Dirk Schnelle-Walka &lt; <br> ***@***.***&gt; wrote: <br> <br> &gt; Review on 2024-11-06 <br> &gt; <br> &gt; - Add a section after section 4 talk about privacy <br> &gt; <br> &gt; — <br> &gt; Reply to this email directly, view it on GitHub <br> &gt; &lt;#60 (comment)&gt;, <br> &gt; or unsubscribe <br> &gt; &lt;https://github.com/notifications/unsubscribe-auth/AAYKDR6QF64KM4UHVW7K37TZ7I6IXAVCNFSM6AAAAABNUSHJG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRQGIYTENJQGA&gt; <br> &gt; . <br> &gt; You are receiving this because you are subscribed to this thread.Message <br> &gt; ID: ***@***.***&gt; <br> &gt; <br> <br> <br> -- <br> Noreen Whysel <br> ***@***.*** <br> http://www.whysel.com <br> — Reply to this email directly, [ #60 (comment) | view it on GitHub ] , or [ https://github.com/notifications/unsubscribe-auth/BABDRFOWM2BVLDBVEBMPZADZ7JDOFAVCNFSM6AAAAABNUSHJG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRQGMYTONZRGA | unsubscribe ] . You are receiving this because you were assigned. Message ID: ***@***.***>

[GerardChollet2]

Good evening, Is this to be added to [ https://w3c.github.io/voiceinteraction/voice%20interaction%20drafts/paArchitecture/paArchitecture-1-3.htm | https://w3c.github.io/voiceinteraction/voice%20interaction%20drafts/paArchitecture/paArchitecture-1-3.htm ] , please ? Thanks in advance. You may want to have a look at [ https://patentimages.storage.googleapis.com/f4/00/66/7fdcfd91f70173/US10810313.pdf | https://patentimages.storage.googleapis.com/f4/00/66/7fdcfd91f70173/US10810313.pdf ] Best, Gérard ​​_____________________________________________________________________ Gérard ***@***.*** Institut Polytechnique de Paris, IMT-TSP, 9 rue Charles Fourier, 91011 Evry Tel: +33 1 75319628 , http://perso.telecom-paristech.fr/~chollet/

…

_____________________________________________________________________ De: "Dirk Schnelle-Walka" ***@***.***> À: "w3c" ***@***.***> Cc: "Gerard CHOLLET" ***@***.***>, "Assign" ***@***.***> Envoyé: Mercredi 6 Novembre 2024 17:17:14 Objet: Re: [w3c/voiceinteraction] taxonomy of private data types (Issue #60) Review on 2024-11-06 * Add a section after section 4 talk about privacy — Reply to this email directly, [ #60 (comment) | view it on GitHub ] , or [ https://github.com/notifications/unsubscribe-auth/BABDRFKSHZK3HQI3MYERWZLZ7I6IVAVCNFSM6AAAAABNUSHJG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRQGIYTENJQGA | unsubscribe ] . You are receiving this because you were assigned. Message ID: ***@***.***>