在线社交网络中延伸访问控制机制研究

doi:10.11959/j.issn.2096-109x.2021075

Abstract

Abstract:

Aiming at the problem of inability to extend control over the data published by users in social networks, an extended access mechanism based on privacy labels was proposed.This mechanism granted users and data different types of labels based on the number of user relationship hops and resource forwarding hops, so as to achieve fine-grained extended access control to the data.The generation algorithm and distribution method of privacy labels were proposed.The constraint rules of privacy label were designed and the possible policy conflicts were analyzed.Finally, the test proves that the mechanism achieves fine-grained extended control in social networks, and proves its security and validity of the mechanism.

Key words: online social network, privacy label, extended control, privacy protection, information security

CLC Number:

TP302

Rongna XIE, Xiaonan FAN, Lin YUAN, Zichen GUO, Jiayu ZHU, Guozhen SHI. Research on extended access control mechanism in online social network[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 123-131.

Figures/Tables 8

References 16

[1]	TIWARI B , KUMAR A . Role-based access control through on-demand classification of electronic health record[J]. International Journal of Electronic Healthcare, 2015,8(1): 9.
[2]	GATES C E , . Access control requirements for Web 2.0 security and privacy[C]// Proceedings of Workshop on Web 2.0 Security and Privacy. 2007: 249-256.
[3]	姚瑞欣, 李晖, 曹进 . 社交网络中的隐私保护研究综述[J]. 网络与信息安全学报, 2016,2(4): 33-43.
	YAO R X , LI H , CAO J . Overview of privacy preserving in social network[J]. Chinese Journal of Network and Information Security, 2016,2(4): 33-43.
[4]	FONG P W L , . Relationship-based access control:protection model and policy language[C]// ACM Conference on Data ＆ Application Security ＆ Privacy. 2011: 191-202.
[5]	RIZVI S Z R , FONG P W L , CRAMPTON J ,et al. Relationship-based access control for an open-source medical records system[C]// The 20th ACM Symposium. 2015: 113-124.
[6]	GUO L , ZHANG C , FANG Y . A Trust-based privacy-preserving friend recommendation scheme for online social networks[J]. IEEE Transactions on Dependable and Secure Computing, 2015,12(4): 413-427.
[7]	CHENG Y , PARK J , SANDHU R . A user-to-user relationship-based access control model for online social networks[J]. IEEE Transactions on Dependable ＆ Secure Computing, 2017,13(4): 1-1.
[8]	CHENG Y , PARK J , SANDHU R . Attribute-aware relationship-based access control for online social networks[M]. Data and Applications Security and Privacy XXVIII. Springer Berlin Heidelberg, 2014: 292-306.
[9]	李凤华, 孙哲, 牛犇 ,等. 跨社交网络的隐私图片分享框架[J]. 通信学报, 2019,40(7): 1-13.
	LI F H , SUN Z , NIU B ,et al. Privacy-preserving photo sharing framework cross different social network[J]. Journal on Communications, 2019,40(7): 1-13.
[10]	ANSHELEVICH E , BHARDWAJ O , USHER M . Friend of my friend:network formation with two-hop benefit[J]. Theory of Computing Systems, 2015,57(3): 711-752.
[11]	陈天柱, 郭云川, 牛犇 ,等. 面向社交网络的访问控制模型和策略研究进展[J]. 网络与信息安全学报, 2016,2(8): 1-9.
	CHEN T Z , GUO Y C , NIU B ,et al. Research progress of access control model and policy in online social networks[J]. Chinese Journal of Network and Information Security, 2016,2(8): 1-9.
[12]	唐文, 陈钟, 段云所 . 公钥密码技术[J]. 网络安全技术与应用, 2001: 61-64.
	TANG W , CHEN Z , DUAN Y S . Public key cryptography[J]. Network Security Technology and Application, 2001: 61-64.
[13]	李凤华, 孙哲, 吕梦凡 ,等. 社交照片隐私保护机制研究进展[J]. 信息安全学报, 2018(2): 41-61.
	LI F H , SUN Z , LYU M F ,et al. Research progress of photo privacy-preserving mechanisms in online social network[J]. Journal of Cyber Security, 2018(2): 41-61.
[14]	KARJOTH G U , SCHUNTER M , WAIDNER M . Platform for enterprise privacy practices:Privacy-enabled management of customer data[C]// International Conference on Privacy Enhancing Technologies. 2002: 69-84.
[15]	BAKER E . EXIF Custom:Automatic image metadata extraction for Scratchpads and Drupal[J]. Biodiversity Data Journal, 2013,1(1): e973.
[16]	杨晓锋 . 数码图像文件格式标准 Exif 解读[J]. 照相机, 2006(4): 69-71.
	YANG X F . Interpretation of digital image file format standard Exif[J]. Camera, 2006(4): 69-71.

Metrics

Recommended 0

No Suggested Reading articles found!

隐私标签	说明
public final static int Privacylevel=0x0001	图片的隐私水平
public final static int Actionlevel=0x0002	图片的操作类型
public final static int Relativelevel=0x0003	用户的信任度
public final static int Group=0x0004	用户组
public final static int Relative=0x0005	用户关系
public final static int Count_r=0x0006	关系跳数
public final static int Count_s=0x0007	转发跳数
public final static int Time=0x0008	时间
public final static int Location=0x0009	地理位置

Research on extended access control mechanism in online social network

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 16

Related Articles 15

Metrics

Recommended 0

[1]	Jianlong XU, Jian LIN, Yusen LI, Zhi XIONG. Distributed user privacy preserving adjustable personalized QoS prediction model for cloud services [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 70-80.
[2]	Zhe SUN, Hong NING, Lihua YIN, Binxing FANG. Preliminary study on the construction of a data privacy protection course based on a teaching-in-practice range [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 178-188.
[3]	Fenghua LI, Hui LI, Ben NIU, Weidong QIU. Academic connotation and research trends of privacy computing [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 1-8.
[4]	Ganqin LIU, Hui LI, Hui ZHU, Yukun HUANG, Xingdong LIU. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38.
[5]	Xue BAI, Baodong QIN, Rui GUO, Dong ZHENG. Two-party cooperative blind signature based on SM2 [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 39-51.
[6]	Jun LIU, Lin YUAN, Zhishang FENG. Survey of key management schemes for cluster networks [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 52-69.
[7]	Min XIAO, Tao YAO, Yuanni LIU, Yonghong HUANG. Dynamic and efficient vehicular cloud management scheme with privacy protection [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 70-83.
[8]	Chenxin LU, Bing CHEN, Ning DING, Liquan CHEN, Ge WU. Identity-based anonymous cloud auditing scheme with compact tags [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 156-168.
[9]	Shengzhi MING, Jianming ZHU, Zhiyuan SUI, Xian ZHANG. Online medical privacy protection strategy under information value-added mechanism [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 169-177.
[10]	Yi XIA, Mingjng LAN, Xiaohui CHEN, Junyong LUO, Gang ZHOU, Peng HE. Survey on explainable knowledge graph reasoning methods [J]. Chinese Journal of Network and Information Security, 2022, 8(5): 1-25.
[11]	Xian ZHANG, Jianming ZHU, Zhiyuan SUI, Shengzhi MING. Analysis on anonymity and regulation of digital currency transactions based on game theory [J]. Chinese Journal of Network and Information Security, 2022, 8(5): 150-157.
[12]	Feng LIU, Jie YANG, Jiayin QI. Survey on blockchain privacy protection techniques in cryptography [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 29-44.
[13]	Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76.
[14]	Weicheng ZHANG, Hongquan WEI, Shuxin LIU, Liming PU. Fast handover authentication scheme in 5G mobile edge computing scenarios [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 154-168.
[15]	Zhensheng GAO, Lifeng CAO, Xuehui DU. Research progress of access control based on blockchain [J]. Chinese Journal of Network and Information Security, 2021, 7(6): 68-87.