The Solid specification aims to empower data subjects by giving them direct access control over their data across multiple applications. As governments are manifesting their interest in this framework for citizen empowerment and e-government services, security and privacy represent pivotal issues to be addressed. By analysing the relevant legislation, with an emphasis on GDPR and officially approved documents such as codes of conduct and relevant security ISO standards, we formulate the primary security and privacy requirements for such a framework. The legislation places some obligations on pod providers, much like cloud services. However, what is more interesting is that Solid has the potential to support GDPR compliance of Solid apps and data users that connect, via the protocol, to Solid pods containing personal data. A Solid-based healthcare use case is illustrated where identifying such controllers responsible for apps and data users is essential for the system to be deployed. Furthermore, we survey the current Solid protocol specifications regarding how they cover the highlighted requirements, and draw attention to potential gaps between the specifications and requirements. We also point out the contribution of recent academic work presenting novel approaches to increase the security and privacy degree provided by the Solid project. This paper has a twofold contribution to improve user awareness of how Solid can help protect their data and to present possible future research lines on Solid security and privacy enhancements.

More from our Archive

• DOI: 10.3390/info14070376 2023

  A Comparison of Machine Learning Techniques for the Detection of Type-2 Diabetes Mellitus: Experiences from Bangladesh

  Md. Jamal Uddin, Md. Martuza Ahamad, Md. Nesarul Hoque, Md. Abul Ala Walid, Sakifa Aktar, Naif Alotaibi, Salem A. Alyami, Muhammad Ashad Kabir, Mohammad Ali Moni

• DOI: 10.1093/bib/bbad247 2023

  GCFMCL: predicting miRNA-drug sensitivity using graph collaborative filtering and multi-view contrastive learning

  Jinhang Wei, Linlin Zhuo, Zhecheng Zhou, Xinze Lian, Xiangzheng Fu, Xiaojun Yao

• DOI: 10.3390/drones7070471 2023

  An Efficient Framework for Autonomous UAV Missions in Partially-Unknown GNSS-Denied Environments

  Michael Mugnai, Massimo Teppati Losé, Edwin Herrera-Alarcón, Gabriele Baris, Massimo Satler, Carlo Avizzano

• DOI: 10.3390/info14070411 2023

  Assessing the Solid Protocol in Relation to Security and Privacy Obligations

  Christian Esposito, Ross Horne, Livio Robaldo, Bart Buelens, Elfi Goesaert

• DOI: 10.3390/info14070409 2023

  Artificial Intelligence Generative Tools and Conceptual Knowledge in Problem Solving in Chemistry

  Wajeeh Daher, Hussam Diab, Anwar Rayan

• DOI: 10.3390/data8070120 2023

  PoPu-Data: A Multilayered, Simultaneously Collected Lying Position Dataset

  Luís Fonseca, Fernando Ribeiro, José Metrôlho, Adriana Santos, Rogério Dionisio, Mohammad Mohammad Amini, Arlindo F. Silva, Ahmad Reza Heravi, Davood Fanaei Sheikholeslami, Filipe Fidalgo, Francisco B. Rodrigues, Osvaldo Santos, Patrícia Coelho, Seyyed Sajjad Aemmi

• DOI: 10.3390/drones7070467 2023

  Flow Structure around a Multicopter Drone: A Computational Fluid Dynamics Analysis for Sensor Placement Considerations

  Mauro Ghirardelli, Stephan T. Kral, Nicolas Carlo Müller, Richard Hann, Etienne Cheynet, Joachim Reuder

• DOI: 10.1093/bib/bbad252 2023

  An overview on nucleic-acid G-quadruplex prediction: from rule-based methods to deep neural networks

  Karin Elimelech-Zohar, Yaron Orenstein

• DOI: 10.1177/10946705231188670 2023

  Shaping Circular Service Ecosystems

  Julia A. Fehrer, Joya A. Kemper, Jonathan J. Baker

• DOI: 10.1145/3607471 2023

  Co-lexicographically Ordering Automata and Regular Languages - Part I

  Nicola Cotumaccio, Giovanna D’Agostino, Alberto Policriti, Nicola Prezza