Publications
Permanent URI for this collectionhttps://repositorio.grial.eu/handle/123456789/34
Browse
2 results
Search Results
Item Personal Data Broker Instead of Blockchain for Students’ Data Privacy Assurance(Springer, 2019-04-01) Amo, D.; Fonseca, D.; Alier, M.; García-Peñalvo, F. J.; Casañ, M. J.Data logs about learning activities are being recorded at a growing pace due to the adoption and evolution of educational technologies (Edtech). Data analytics has entered the field of education under the name of learning analytics. Data analytics can provide insights that can be used to enhance learning activities for educational stakeholders, as well as helping online learning applications providers to enhance their services. However, despite the goodwill in the use of Edtech, some service providers use it as a means to collect private data about the students for their own interests and benefits. This is showcased in recent cases seen in media of bad use of students’ personal information. This growth in cases is due to the recent tightening in data privacy regulations, especially in the EU. The students or their parents should be the owners of the information about them and their learning activities online. Thus they should have the right tools to control how their information is accessed and for what purposes. Currently, there is no technological solution to prevent leaks or the misuse of data about the students or their activity. It seems appropriate to try to solve it from an automation technology perspective. In this paper, we consider the use of Blockchain technologies as a possible basis for a solution to this problem. Our analysis indicates that the Blockchain is not a suitable solu-tion. Finally, we propose a cloud-based solution with a central personal point of management that we have called Personal Data Broker.Item GDPR Security and Confidentiality compliance in LMS’ a problem analysis and engineering solution proposal(ACM, 2019-10-16) Amo, D.; Alier, M.; García-Peñalvo, F. J.; Fonseca, D.; Casany, M. J.We have studied the main Learning Management Systems (LMSs) to comprehend how personal data is processed and stored. We found that all the users' personal information, activity, and logs are stored unencrypted on the server filesystem and databases. A user with access to such resources may have full access to all the personal information and meta-information stored. Therefore, the LMSs are very vulnerable to information leaks in front of targeted hacker attacks due to weak GDPR compliance. In this paper, we analyze this problem from a technical and operational perspective for the open-source market leader LMS Moodle, and we propose a solution and a prototype of implementation.