The rapid expansion of the Internet of Things (IoT) and smart home ecosystems has led to a fragmented landscape of user data management across consumer electronics (CE) such as Smart TVs, gaming consoles, and set-top boxes. Current onboarding processes on these devices are characterized by high friction due to manual data entry and opaque data-sharing practices. This paper introduces the User Data Sharing System (UDSS), a platform-agnostic framework designed to facilitate secure, privacy-first PII (Personally Identifiable Information) exchange between device platforms and third-party applications. Our system implements a Contextual Scope Enforcement (CSE) mechanism that programmatically restricts data exposure based on user intent - specifically distinguishing between Sign-In and Sign-Up workflows. Unlike cloud-anchored identity standards such as FIDO2/WebAuthn, UDSS is designed for shared, device-centric CE environments where persistent user-to-device binding cannot be assumed. We further propose a tiered access model that balances developer needs with regulatory compliance (GDPR/CCPA). A proof-of-concept implementation on a reference ARMv8 Linux-based middleware demonstrates that UDSS reduces user onboarding latency by 65% and measurably reduces PII over-exposure risk through protocol-enforced data minimization. This framework provides a standardized approach to identity management in the heterogeneous CE market.

翻译：物联网（IoT）与智能家居生态系统的迅猛发展，导致消费电子设备（如智能电视、游戏主机、机顶盒）中的用户数据管理呈现碎片化格局。当前这些设备的用户注册流程因需手动输入数据及不透明的数据共享实践而存在高摩擦性。本文提出用户数据共享系统（UDSS），这是一个平台无关框架，旨在促进设备平台与第三方应用程序之间安全且以隐私优先的个人身份信息（PII）交换。该系统实现了上下文作用域实施（CSE）机制，可根据用户意图（具体区分登录与注册工作流）以编程方式限制数据暴露。与基于云的身份标准（如FIDO2/WebAuthn）不同，UDSS专为共享型、以设备为中心的消费电子环境设计，此类环境中无法假设用户与设备具有持久绑定关系。我们进一步提出分层访问模型，在开发者需求与法规遵循（GDPR/CCPA）之间取得平衡。基于参考ARMv8 Linux中间件的概念验证实现表明，UDSS通过协议强制数据最小化，将用户注册延迟降低65%，并显著降低PII过度暴露风险。该框架为异构消费电子市场中的身份管理提供了标准化方法。