We are excited to bring Transform 2022 back to life on 19th July and virtually 20th July – 3rd August. Join AI and data leaders for discreet discussions and exciting networking opportunities. Learn more
Today, Meta Engineers gave a talk as part of the Systems @ Scale Virtual event detailing the organization’s approach to data minimization and detailing an internal solution known as the Anonymous Identity Card Service (ACS).
Meta’s ACS is designed to enable users to “de-authenticate” authentication, allowing access to services without collecting any data that could be used to identify the subject.
Under ACS, the client contacts the server through an authentication channel and sends a token, which the server signs and returns.
The client then uses an anonymous channel to submit data to the server and authenticate it using a modified form of token instead of the user’s ID. Allows this server to authenticate clients without knowing which token the token belongs to.
The organization’s approach highlights potential options for enterprises and technical decision makers who are looking for techniques to reduce the amount of data they collect.
The need to de-identify data
With data privacy regulations rising around the world and the organization opposing GDPR for transatlantic data sharing, the company recently announced that it would pull Facebook and Instagram out of Europe if GDPR stopped sharing user data. From US to EU.
“We have no desire or plans to move out of Europe, but the simple reality is that Meta and many other businesses, organizations and services rely on data transfer between the EU and US to run global services,” a Meta spokesperson said. Was.
For all organizations doing business, minimal data needs to be collected so that personally identifiable information does not fall into the wrong hands.
The development of ACS by Meta provides a new technique that organizations can use to authenticate users and ensure the security of key services while separating their identities from personally identifiable information.
“Gathering the minimum data needed to support our services – is one of our core principles at Meta as we continue to develop new privacy enhancement technologies (PETs). Looking for, “said meta software engineers Shiv Kushwaha and Haozi Xiong in an official blog post.
ACS provides a way to keep confidential information private while ensuring that the organization has sufficient data to perform its critical functions.
“Therefore, we have taken advantage of the ‘Anonymous Identity Card’, designed over the years in collaboration between industry and academics, to create a core service called the Anonymous Identity Card Service (ACS). ACS is a highly available, multi-tenant service that allows clients to authenticate anonymously, “said Kushwaha and Xiong.
It enhances privacy and security as well as being accountable. ACS is one of the newest additions to our PETS portfolio and is currently used in many high-volume usage cases at Meta. ”
Trials and difficulties of data protection
The data protection market is in a state of growth when it comes to meta-engineering, while the market is expected to grow from $ 61 million in 2020 to $ 11 million by 2027 as data volume increases with government regulations implementing new data protection standards.
Social media companies definitely need innovation related to data security, as well Twitter The Irish Data Protection Commission has recently imposed a fine of 450,000 ($ 502,440.75 USD) for GDPR violations following the recent data breach in 2019.
Similarly, TikTok has made costly mistakes regarding data management, while in July last year, the Dutch Data Protection Authority (DPA) issued a દ 750,000 ($ 837,198.75 USD) privacy penalty for failing to offer a privacy statement in Dutch.
Currently Meta aims to differentiate itself from other social media providers by developing a new solution for data sharing that will ensure that data can be leveraged without disclosing any personal information to regulatory responsibilities and risky actors.
Venturebeat’s mission Digital Town Square is set to become a place for technical decision makers to gain knowledge about the changing enterprise technology and practices. Learn more