Page 12 - Unlocking the potential of trust-based AI for city science and smarter cities

Figure 2. Data Management and Sharing in Smart Cities.

GDPR also specifies the rights of Data Subjects including Right of Access and Right of granting
citizens the rights to monitor their personal data and information about how the personal data
is being processed; and the right to control the related personal information. Therefore, a Smart
City management platform, which take on the role of a Data Controller, should take appropriate
measures not only to provide citizens information related to how their personal data is being
processed and managed but also the ability to control their data usage ensuring security and privacy.

Moreover, in the absence of proper safety mechanisms, data can be compromised at various
points or even via the interfaces of different smart city devices. Nevertheless, objects in large-
scale networks like in smart city possibly lack the knowledge to evaluate services’ reliably as both
untrustworthy and trustworthy objects can interact with each other in the absence of a trusted
intermediary which governs each transaction.

To fill this gap, the suggested approach proposes an intermediary authority named the Trust
Manager to evaluate each interaction in a trustworthy manner as shown in Figure 3.

In a large heterogeneous distributed system (e.g. smart city), there is a large number of requests
to access and process data. In Figure 3, data subject refers to any individual that can be identified,
directly or indirectly, through an identifier and whose personal data is being collected (refereed to as
PII – personally identifiable information). The data controller determines the purposes for which and
the means by which personal data is processed. On the other hand, the data processor processes
personal data on behalf of the controller.

6 Unlocking the potential of trust-based AI for city science and smarter cities - October 2019