Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

Ubiquitous questionnaire is to provide users with e-questionnaire services anytime and anywhere such that one can use e-questionnaire servers without even thinking about them. An e-questionnaire server for ubiquitous questionnaire should provide guarantees to satisfy any user-specified requirement on information assurance, privacy, and security because some questionnaires may concern organization secrets as well as personal privacy, and some questionnaires such as e-voting or e-testing must impose restrictions on and provide assurance to respondents, voters, and/or testees. Until now, there is no detail requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. To implement an e-questionnaire server for ubiquitous questionnaire, this paper presents a requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. The paper identifies all participants and their information assets in ubiquitous questionnaire with a general purpose e-questionnaire server that can be used not only an e-questionnaire server but also an e-voting server and an e-testing server, gives a threat analysis of and a requirement analysis for information assurance, privacy, and security, and investigates technical issues for implementing facilities satisfied the requirements.