Customizing IETF RFC 6280 Geopriv for Compliance of Wi-Fi Positioning System APIs with Privacy Laws
Saikrishna Yellanki, Dale Lindskog, Pavol Zavarsky, Ron Ruhl · 2016
This paper proposes a customization of the IETF RFC 6280 Geopriv to facilitate compliance of Wi-Fi positioning systems with existing privacy regulations. It is shown that APIs of existing Wi-Fi positioning systems, based on the distribution phase of the IETF RFC 6280 Geopriv, do not fully protect location privacy of a user of an IEEE 802.11 (Wi-Fi) enabled device. The existing controls of the WiPS are compared with requirements of privacy regulations. To address gaps identified in these controls, the RFC 6280 architecture is modified to include design rules into the rule maker component. We also show that existing WiPS privacy protecting controls should be enhanced to be in compliant with this modified Geopriv which significantly enhances users control over location privacy.