The project created a proof-of-concept solution for the secure private processing of longitudinal Mobile Network Operator data in support of official statistics.
The main goal of the project was to explore feasibility of a Secure Private Computing solution for the privacy-preserving processing of Mobile Network Operator data. The technology chosen for implementation was Cybernetica's Sharemind HI that uses Trusted Execution Environment (TEE) with Intel® Software Guard Extensions (Intel® SGX) technology. Sharemind HI fully utilises the three key concepts that Intel® SGX provides to help protect data – enclaves, attestation and data sealing.
The project followed Cybernetica methodology for analysing and designing information systems with high security and privacy requirements.
PE-BPMN: Privacy-Enhanced Business Process Model and Notation with the open source PLEAK tool was used for mapping the cooperation model of Mobile Network Operator and National Statistics Institute.
See the solution analysis document here.
The privacy impact assessment used CNIL's data protection impact assessment methodology.
The DPIA can be found at Scoping Report DPIA Evaluation Report
All project deliverables, including application source code are published with the EUPL open source license at
https://ec.europa.eu/eurostat/cros/content/eurostat-cybernetica-project_en