Security Challenges and Selected Legal Aspects for Wearable Computing

This paper discusses information security challenges encountered during the wearIT@work project and selected legal aspects of wearable computing. Wearable computing will offer interesting opportunities to improve and reengineer work processes in organizations, but can at the same introduce alignment problems as users in organizations may adopt the new technology before organizations are prepared. In addition, needed supportive legal frameworks have not yet fully addressed the new wearable computing technology. Different alignment concepts for how such challenges can be managed are discussed in the paper. DOI: 10.4018/jitr.2012010104 Journal of Information Technology Research, 5(1), 68-87, January-March 2012 69 Copyright © 2012, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited. powerful computers, greater personal mobility and increasing personalization of devices. Closely related to each other are ubiquitous computing, which is introduced by Weiser (1991), and pervasive computing, which refers to the vision where computers are integrated in the environment and the usage is completely transparent to the user. Wearable computing may thus fall under the category of pervasive computing. Lyytinen and Yoo (2002) argue that pervasive computing services require more effort regarding design and maintenance compared to ubiquitous ones, making the availability and usefulness of pervasive computing services limited. However, we think that the recent advances within context awareness-, localization-, and cloud services make this previous gap small today. Wearable computing is also introduced by the wearIT@work project2 as follows: “Wearable mobile computing can empower professionals to higher levels of productivity by providing more seamless and effective forms of access to knowledge at the point of work, collaboration and communication. The new technology of wearable mobile computing will meet the need of many individual professionals for acting more flexibly, effectively and efficiently in the increasingly complicated and challenging European work environment. It can be used to enhance jobs in industry and services to make them both more rewarding and effective and re-elevate the role of the professional at work...” As wearable computers and systems for different business mature, they can be used in a lot of work areas where there is at present very little or no IT-support. Wearable computers will most likely be used more and more, not only at work but also during leisure time. This is due to the fact that wearables, being very small, integrated into clothing and able to interact intelligently with the surrounding environment as well as detect other computing devices (Lyytinen & Yoo, 2002), will be brought almost everywhere. This exposure to a variety of unsecure or hostile network environments will require a higher level of information security to protect personal integrity and privacy, confidential information and communications. At the same time, the legal frameworks need to adapt to the use of wearables, as they put new requirements on the protection of personal integrity and privacy as well as information security. However, one of the problems with legal frameworks and IT is that the pace of development of IT is so fast that the adaption and development of the legal frameworks is almost always a couple of years or more behind, often forcing the frameworks to be very general.