TY - CHAP AU - Stach, Christoph AU - Mitschang, Bernhard A2 - Mori, Paolo A2 - Furnell, Steven A2 - Camp, Olivier T1 - Elicitation of Privacy Requirements for the Internet of Things Using ACCESSORS T2 - Information Systems Security and Privacy: 4ᵗʰ International Conference, ICISSP 2018, Funchal - Madeira, Portugal, January 22-24, 2018, Revised Selected Papers PB - Springer AD - Cham Y1 - 2019 VL - 977 SP - 40 EP - 65 M3 - https://doi.org/10.1007/978-3-030-25109-3_3 KW - permission model; data-centric; derivation transparent; fine-grained; context-sensitive; Internet of Things; PMP; PATRON N2 - Novel smart devices are equipped with various sensors to capture context data. The Internet of Things (IoT) connects these devices with each other in order to bring together data from various domains. Due to the IoT, new application areas come up continuously. For instance, the quality of life and living can be significantly improved by installing connected and remote-controlled devices in Smart Homes. Or the treatment of chronic diseases can be made more convenient for both, patients and physicians, by using Smart Health technologies. For this, however, a large amount of data has to be collected, shared, and combined. This gathered data provides detailed insights into the user of the devices. Therefore, privacy is a key issue for such IoT applications. As current privacy systems for mobile devices focus on a single device only, they cannot be applied to a distributed and highly interconnected environment as the IoT. Therefore, we determine the special requirements towards a permission models for the IoT. Based on this requirements specification, we introduce ACCESSORS, a data-centric permission model for the IoT and describe how to apply such a model to two promising privacy systems for the IoT, namely the Privacy Management Platform (PMP) and PATRON. ER -