Abstract
Users have lost control and ownership of their personal information in Cyberspace. Personal information is scattered across many company databases in Cyberspace and introduces many security risks, as well as a central point of attack that affects any user’s accounts containing personal information. Based on the information gathered on data breaches, the purpose of the research presented within this dissertation is to explore alternative methods that can be applied in Cyberspace. This will allow for the secured ownership and control of personal information. These methods will explore the mitigation of risks to personal information and improve the security of personal information in Cyberspace. By investigating the best methods to own and control personal information, some factors needed to be considered. Personal information would need to be transferable with users or parties in an environment which provides security, integrity, transparency, control, and interaction. In this dissertation, we will develop a model that will address the abovementioned points. The model is called the “SUUS CHAIN” model. “SUUS” means to be independent [1]. The chain is taken from the Blockchain term to indicate and support the use of the Blockchain technologies in this model. To support the development of the SUUS CHAIN model, we have chosen Blockchain technology which utilizes Smart Contracts. The Blockchain technology will provide the needed environment to securely send personal information between two parties while holding the integrity of the message, providing a fully auditable trail, and allow for the development of Smart Contracts. Smart Contracts will allow us to program any rules and conditions set out between two or more parties, concerning their personal information. We would also be allowed to program an authorization mechanism for interacting with user personal information. The contribution of our SUUS CHAIN model would be to allow users to own their personal information, as well as control how personal information is handled in Cyberspace. In doing so, we will also contribute to the improvement of securely transacting and sending personal information across Cyberspace. From the information and results accumulated throughout this dissertation, we have provided a working prototype demonstration of the SUUS CHAIN model. We have proven that the problem statement can be solved, and the objectives are met. Our SUUS CHAIN prototype demonstration, as well as the literature results provided, proves the security, control, and ownership of personal information can be accomplished.
M.Sc. (Computer Science)