[Paper Review] Integrating Privacy-Enhancing Technologies into the Internet Infrastructure

David Harborth, Dominik Herrmann+6 more|arXiv (Cornell University)|Nov 20, 2017

Privacy, Security, and Data Protection16 references3 citations

TL;DR

This paper proposes integrating privacy-enhancing technologies (PETs) into the internet's core infrastructure to enable zero-effort, high-performance privacy protection for mass-market users. It focuses on ISP-level anonymization, optimized overlay networks, and 5G-specific privacy mechanisms, supported by sustainable business models to ensure widespread adoption and usability.

ABSTRACT

The AN.ON-Next project aims to integrate privacy-enhancing technologies into the internet's infrastructure and establish them in the consumer mass market. The technologies in focus include a basis protection at internet service provider level, an improved overlay network-based protection and a concept for privacy protection in the emerging 5G mobile network. A crucial success factor will be the viable adjustment and development of standards, business models and pricing strategies for those new technologies.

Motivation & Objective

• Address the low adoption of existing PETs like Tor and JonDonym due to usability, performance, and lack of default integration.
• Develop zero-effort, transparent privacy protection by embedding PETs directly into internet infrastructure, especially at the ISP level.
• Improve performance and compatibility of overlay-based anonymization while ensuring strong privacy guarantees.
• Design privacy-preserving mechanisms tailored for 5G networks, balancing low latency and high data throughput with robust anonymity.
• Create viable, sustainable business models that incentivize ISPs and stakeholders to deploy and operate PETs at scale.

Proposed method

• Design lightweight, transparent anonymization mechanisms that operate at the ISP level, minimizing user intervention.
• Optimize existing overlay networks (e.g., Tor, JonDonym) through protocol enhancements and performance tuning to reduce latency and bandwidth overhead.
• Develop 5G-specific privacy solutions using location privacy policies and transparency-enhancing techniques to control data disclosure.
• Extend existing protocols like EPA and EPAL to support 5G context and enforce access control to raw location data.
• Integrate business model development iteratively with technical design, focusing on tariff models, cost reduction, and stakeholder incentives.
• Conduct pilot projects with industry partners to test, refine, and validate technical and economic feasibility in real-world settings.

Experimental results

Research questions

• RQ1 How can privacy-enhancing technologies be seamlessly integrated into the internet infrastructure to enable zero-effort user protection?
• RQ2 What performance and usability improvements are needed to make overlay-based anonymization viable for mobile and mass-market use?
• RQ3 How can 5G networks support strong privacy guarantees without compromising latency, bandwidth, or service quality?
• RQ4 What business models can ensure long-term sustainability and incentivize ISPs to deploy and operate anonymization services?
• RQ5 How do users perceive different tariff models and privacy trade-offs, particularly regarding location data and service quality?

Key findings

• Existing PETs like Tor and JonDonym suffer from poor usability and high performance overhead, limiting their adoption despite active user bases.
• ISP-based anonymization can significantly reduce user effort and increase adoption if implemented transparently and efficiently.
• Performance optimization of overlay networks is critical—current solutions often cause unacceptable latency and bandwidth loss.
• 5G networks require new privacy mechanisms due to high demands on latency and scalability, making traditional mix networks impractical without redesign.
• Business models must be co-developed with technology to ensure economic feasibility, with tariff models playing a key role in user acceptance and ISP participation.
• User perception of privacy trade-offs, especially regarding location data, must be addressed through transparent policies and user-informed design.