用户数据只分享必要部分,防止过度泄露。
Share No More Than the Request Requires: Federated Disclosure for Perspective-Aware AI
- 用时间知识图谱构建用户身份模型,支持安全共享。
- 响应仅包含请求所需信息,杜绝多余数据暴露。
- 适合关注隐私保护与合规性的企业或研究者。
现代AI系统带来大规模监控、权力集中和用户自主权丧失等社会风险,质疑第三方集中掌控用户数据的模式。用户需要一个主权系统,能安全拥有、管理并披露个人上下文,同时符合严格监管领域对溯源性、可解释性和政策合规的要求。视角感知型AI通过将用户聚合的个人数据转化为结构化身份模型——即时间知识图谱‘Chronicle’——来应对这一挑战。Chronicle支持在联邦网络中安全披露上下文:持有者可提供可查询、授权的视图,供第三方代理访问,无需集中化数据。本文探讨跨域最小必要披露问题:当请求方代理查询Chronicle时,如何限制响应内容,仅释放请求方关系、声明目的和具体任务所需的最小信息?我们提出‘溯源保持的Chronicle’(PPC)协议,将每个持有者的Chronicle编译为紧凑的‘授权证据子图’,核心规则为‘不分享超过请求所需的内容’。持有者保持本地主权;访问控制器基于关系感知生成视图,覆盖领域专家本体;采用两阶段流程,先返回带溯源的文本,经持有者明确批准后才释放原始数据。本文定义问题,分析区块链、点对点及持有者主权设计的不足,建立核心概念,并描绘了带明确威胁模型的协议框架。
原文摘要 · Abstract (English)
Modern AI systems bring societal risks such as mass surveillance, extreme concentrations of power, and loss of user autonomy---calling into question a model where third-parties collect and control massive amounts of user data. Users require a sovereign system to securely own, govern, and disclose their context while remaining compliant across regulated domains with strict provenance, interpretability, and policy adherence. Perspective-aware AI approaches this by transforming a user's aggregated personal data into a structured identity model called a \emph{Chronicle}: a temporal knowledge graph that represents and grows with the user. Chronicles support the secure disclosure of context across federated networks. A Chronicle holder may expose a queryable, authorized view that a third-party agent may consult without centralizing anyone's data. This paper explores the problem of minimum-necessary disclosure across domain boundaries: when a requester's agent queries a Chronicle, how can the system constrain its response to release only what the requester's relationship, stated purpose, and specific task require? We propose \textbf{Provenance Preserving Chronicles} (PPC), a federated protocol that compiles each holder's Chronicle into a compact \emph{authorized evidence subgraph} governed by one rule: \emph{share no more than the request requires}. Holders keep local sovereignty; an access controller projects relationship-aware views over domain-expert ontologies; and a two-phase flow returns provenance-linked text first, releasing raw artifacts only after explicit holder approval. We frame the problem, map gaps in blockchain, P2P, and holder-sovereign designs, define the core constructs, and sketch the protocol with an explicit threat model.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。