🤖 AI Summary
This work addresses the fragmentation and high friction in data management across consumer electronics caused by manual input and opaque sharing practices. To this end, the paper proposes a User Data Sharing System (UDSS), which introduces the first hardware-anchored privacy middleware designed for shared-device environments. Notably, UDSS operates without requiring persistent user–device binding and integrates Contextual Scope Enforcement (CSE) with protocol-driven data minimization to dynamically restrict the exposure of personally identifiable information (PII) according to user intent. A prototype implementation on the ARMv8 Linux architecture demonstrates that, under GDPR/CCPA-compliant tiered access control, UDSS reduces user registration latency by 65% while significantly mitigating the risk of PII overexposure.
📝 Abstract
The rapid expansion of the Internet of Things (IoT) and smart home ecosystems has led to a fragmented landscape of user data management across consumer electronics (CE) such as Smart TVs, gaming consoles, and set-top boxes. Current onboarding processes on these devices are characterized by high friction due to manual data entry and opaque data-sharing practices. This paper introduces the User Data Sharing System (UDSS), a platform-agnostic framework designed to facilitate secure, privacy-first PII (Personally Identifiable Information) exchange between device platforms and third-party applications. Our system implements a Contextual Scope Enforcement (CSE) mechanism that programmatically restricts data exposure based on user intent - specifically distinguishing between Sign-In and Sign-Up workflows. Unlike cloud-anchored identity standards such as FIDO2/WebAuthn, UDSS is designed for shared, device-centric CE environments where persistent user-to-device binding cannot be assumed. We further propose a tiered access model that balances developer needs with regulatory compliance (GDPR/CCPA). A proof-of-concept implementation on a reference ARMv8 Linux-based middleware demonstrates that UDSS reduces user onboarding latency by 65% and measurably reduces PII over-exposure risk through protocol-enforced data minimization. This framework provides a standardized approach to identity management in the heterogeneous CE market.