{"id":18267,"date":"2026-06-05T14:26:54","date_gmt":"2026-06-05T12:26:54","guid":{"rendered":"https:\/\/www.uni.lu\/research-en\/?post_type=events&p=18267"},"modified":"2026-06-10T10:21:10","modified_gmt":"2026-06-10T08:21:10","slug":"doctoral-defence-ivan-abellan-alvarez","status":"publish","type":"events","link":"https:\/\/www.uni.lu\/research-en\/events\/doctoral-defence-ivan-abellan-alvarez\/","title":{"rendered":"Doctoral Defence: Iv\u00e1n ABELL\u00c1N \u00c1LVAREZ"},"content":{"rendered":"\n
<\/div>\n\n\n

The Doctoral School in Science and Engineering<\/a> is happy to invite you to Iv\u00e1n ABELL\u00c1N \u00c1LVAREZ’s defence entitled<\/p>\n\n\n\n

\nAccountable and privacy-oriented decentralised information systems<\/h2>\n\n\n\n

Supervisor<\/strong>: Prof Gilbert FRIDGEN<\/a><\/p>\n\n\n\n

The rise and adoption of information systems has indisputably changed the way we interact in today\u2019s world, yet it comes at the expense of technological and infrastructure over-reliance. The reach of digital transformation, such as digitalisation of daily tasks and services, has led to large amounts of meta and personal data being collected, processed and stored. However, current policy-driven and market-driven information systems security frameworks may not warrant the necessary privacy guarantees in the digital sphere. Wicked problems arise from socio-technical system interdependence and the friction between design requirements, security guarantees and the institutionalisation of privacy practices that if neglected pose threats to individuals\u2019 privacy.<\/p>\n\n\n\n

This thesis exposes the multifaceted view of privacy, highlighting its diverse understandings, and the institutional and organisational commitment to them. We identify and examine tensions between technically desirable properties, organisational and market- driven demands, as well as institutional and policy-driven boundaries. Moreover, it introduces accountability as a compliance and technical property to uphold system reliability either by governance structures, control measures, or legal responsibility.<\/p>\n\n\n\n

The research employs methods ranging from design science research and privacy threat modeling to privacy risk assessments to identify the shortcomings in existing IT design knowledge for addressing recognised privacy principles. This thesis also contributes to data minimisation by design as a guiding development and evaluative approach, providing prescriptive design knowledge and deriving design principles to balance privacy and compliance requirements, such as data minimisation, and accountability.<\/p>\n\n\n\n

Specifically, this thesis examines three domains of study, namely (de)-centralised infrastructure, policy-driven information systems, and market-driven information systems.<\/p>\n\n\n\n

Within the infrastructure domain, information security management systems and permissionless networks, such as blockchain-like systems, are studied as two distinct perspectives for reliable system design.<\/p>\n\n\n\n

Policy-driven use cases, such as the EU digital identity wallet and card-not-present payments, are analysed to examine tensions between security requirements, privacy demands, and compliance obligations.<\/p>\n\n\n\n

Finally, market- driven contexts, including digital platforms and data-sharing electronic markets, are used to study data privacy trade-offs.<\/p>\n\n\n\n