Proxies for privacy in ambient systems Article