面向社会网络的个性化隐私策略定义与实施

doi:10.3969/j.issn.1000-436x.2012.z1.032

通信学报 ›› 2012, Vol. 33 ›› Issue (Z1): 239-249.doi: 10.3969/j.issn.1000-436x.2012.z1.032

面向社会网络的个性化隐私策略定义与实施

王媛¹,孙宇清¹(),马乐乐^1,²

¹ 山东大学计算机科学与技术学院，山东济南 250101
² 中国科学院，北京100190

出版日期:2012-09-25 发布日期:2017-08-03
基金资助:
国家自然科学基金资助项目;山东大学自主创新基金资助项目;山东省自然科学基金资助项目;中国科学院计算机系统结构重点实验室开放课题基金资助项目

Specification and enforcement of personalized privacy policy for social network

Yuan WANG¹,Yu-qing SUN¹(),Le-le MA^1,²

¹ School of Computer Science and Technology,Shandong University,Jinan 250101,China
² Chinese Academy of Sciences,Beijing 100190,China

Online:2012-09-25 Published:2017-08-03
Supported by:
The National Natural Science Foundation of China;The Independent Innovation Foundation of Shandong University;The Natural Science Foundation of Shandong Province;The Open Funding of Key Laboratory of Computer System and Architecture of Chinese Academy of Sciences

摘要/Abstract

摘要：

为了实现社会网络中个性化隐私保护，提出了支持个性化隐私偏好授权模型，采用基于一阶逻辑隐私偏好描述语言，表达用户个性化隐私需求；引入基于主体属性的访问者－角色授权规则和基于客体标签的角色－权限指派规则，解决了动态用户授权和细粒度访问权限指派问题；分析了隐私策略冲突各种情况，实现了基于Prolog逻辑编程的策略一致性自动验证；设计了面向社会网络个性化隐私策略管理和实施中间件，将个性化隐私策略管理有效地集成到对既有资源的访问控制系统中，实验表明策略冲突分析具有良好的执行效率。

关键词: 社会网络, 隐私策略, 个性化, 冲突解决, Prolog

Abstract:

An authorization model was proposed to support personalized privacy preferences in the first-logic privacy preference language.The language allowed users to express personalized privacy preferences.Visitor-role authorization rules based on the attributes of visitors and role-permission assignment rules based on the tags of objects were introduced,which resolve dynamic authorization and fine-grained rights assignment problems.Analyzed privacy policy conflict cases and realized policy consistency verification by Prolog logic programming.Designed a personalized privacy policy management and implementation middleware for social network.In the middleware,it integrated the management of personalized policy into access control system on the existing resources.The experiments show that the policy conflict analysis has good efficiency in the implementation.

Key words: social network, privacy policy, personalized, conflict resolution, Prolog

王媛,孙宇清,马乐乐. 面向社会网络的个性化隐私策略定义与实施[J]. 通信学报, 2012, 33(Z1): 239-249.

Yuan WANG,Yu-qing SUN,Le-le MA. Specification and enforcement of personalized privacy policy for social network[J]. Journal on Communications, 2012, 33(Z1): 239-249.

图/表 7

图1

图2

图3

图4

图5

图6

图7

参考文献 14

[1]	Facebook fact sheet and statistics[EB/OL]. , 2011.
[2]	SQUICCIARINI A , PACI F , SUNDARESWARAS N . PriMa:an effective privacy protection mechanism for social networks[A]. Proceedings of the 5th ACM Symposium on Information,Computer and Communications Security[C]. Beijing,China, 2010. 320-323.
[3]	WANG T , SRIVATSA M , LIU L . Fine-grained Access control of personal data[A]. ACM Symposium onAccess Control Models and Technologies[C]. Newark,New Jersey,USA, 2012. 145-156.
[4]	LI J , TANG Y , MAO C ,et al. Role based access control for social network sites[A]. Proceedings of Joint Conferences on Pervasive Computing[C]. Taiwan,China, 2009. 389-394.
[5]	CIRIO L , CRUZ I F , TAMASSIA R . A role and attribute based access control system using semantic web technologies[A]. Proceedings of International Federation for Information Processing Workshop on Semantic Web and Web Semantics[C]. Santiago,Chile, 2007. 1256-1266.
[6]	YUAN E , TONG J . Attributed based access control(ABAC) for web services[A]. Proceedings of the IEEE International Conference on Web Services[C]. Orlando,Florida, 2005. 561-569.
[7]	ADAM N , ATLURI V , BERTINO E ,et al. A Content-Based Authorization Model for Digital Libraries[R]. Computer Science Department,Rutgers University, 2001.
[8]	CARMINATI B , FERRARI E , PEREGO A . Rule-based access control for social networks[A]. On the Move to Meaningful Internet Systems:OTM’06 Workshops[C]. Montpellier,France, 2006. 1734-1744.
[9]	JAYARAMAN K , RINARD M C , TRIPUNITARA M ,et al. Automatic error finding in access-control policies[A]. Proceedings of 18th ACM Conference on Computer and Communications Security[C]. Chicago,USA, 2011. 17-21.
[10]	ALBERTI F , ARMANDO A , RANISE S . Efficient symbolic automated analysis of administrative attribute-based RBACpolicies[A]. Proceedings of the 6th ACM Symposium on Information,Computer and Communications Security[C]. Hong Kong,China, 2011. 165-175.
[11]	ANWAR M , FANG P , YANG X D ,et al. Visualizing privacy implications of access control policies in social network systems[A]. Proceedings of the 27th Annual ACM Symposium on Applied Computing[C]. Trento,Italy, 2012. 1443-1450.
[12]	周晓军, 蒋兴浩, 孙锬锋 . RB-RBAC模型的研究与改进[J]. 信息安全与通信保密, 2010,(4): 100-102. ZHOU X J , JIANG X H , SUN T F . Research and Improvement of RB-RBAC[J]. 2010,(4): 100-102.
[13]	努尔买买提·黑力力, 开依沙尔·热合曼 . 带负授权RBAC模型的OWL表示及冲突检测[J]. 计算机工程与应用, 2010,46(30): 82-85. Nurmamat Helil , Kaysar Rahman . Representaion of RBAC model with negative authorization in OWL and conflict detection[J]. Computer Engineering and Applications, 2010,46(30): 82-85.
[14]	李鼎 . 基于逻辑编程的安全策略分析系统设计及其关键技术研究[D]. 郑州:解放军信息工程大学, 2009. LI D . The Design and Research of Policy Analysis System Based on Logic Programming[D]. Zhengzhou:The PLA Information Engineering University, 2009.

[1]	王瀚仪, 李效光, 毕文卿, 陈亚虹, 李凤华, 牛犇. 多级本地化差分隐私算法推荐框架[J]. 通信学报, 2022, 43(8): 52-64.
[2]	张文波, 黄文华, 冯景瑜. 基于无证书签密的车联社会网络安全通信机制[J]. 通信学报, 2021, 42(7): 128-136.
[3]	任永功,张云鹏,张志鹏. 基于粗糙集规则提取的协同过滤推荐算法[J]. 通信学报, 2020, 41(1): 76-83.
[4]	王海艳,陆金祥. 面向群组推荐的个性化隐私保护方法[J]. 通信学报, 2019, 40(9): 106-115.
[5]	张强,王国军,张少波. 基于多边缘服务器的个性化搜索隐私保护方法[J]. 通信学报, 2019, 40(2): 40-50.
[6]	史艳翠,王嫄,赵青,张贤坤. 基于局部扩展的社区发现研究现状[J]. 通信学报, 2019, 40(1): 149-162.
[7]	彭颖,王淖,王高才. 移动社会网络中基于社区的最优能效路由策略研究[J]. 通信学报, 2017, 38(5): 128-144.
[8]	苏洁,刘帅,罗智勇,孙广路. 基于信息损失量估计的匿名图构造方法[J]. 通信学报, 2016, 37(6): 56-64.
[9]	陈福,林闯,薛超,徐月梅,孟坤,倪艺函. 短句语义向量计算方法[J]. 通信学报, 2016, 37(2): 11-19.
[10]	陈云芳,夏涛,张伟,李晋. 基于亲和传播的动态社会网络影响力扩散模型[J]. 通信学报, 2016, 37(10): 40-47.
[11]	王楠,孙钦东,周亚东,王汉秦,隋连升. 基于区域交互模型的SNS网络用户影响力评估[J]. 通信学报, 2016, 37(1): 160-169.
[12]	兰丽辉,鞠时光. 基于差分隐私的权重社会网络隐私保护[J]. 通信学报, 2015, 36(9): 145-159.
[13]	陈侃,陈亮,朱培栋,熊岳山. 基于交互行为的在线社会网络水军检测方法[J]. 通信学报, 2015, 36(7): 120-128.
[14]	杨静,张冰,张健沛,谢静. 基于图划分的个性化轨迹隐私保护方法[J]. 通信学报, 2015, 36(3): 1-11.
[15]	王翔,冷甦鹏,张可,刘浩. 车联社会网络综述[J]. 通信学报, 2015, 36(1): 199-210.

面向社会网络的个性化隐私策略定义与实施

Specification and enforcement of personalized privacy policy for social network

在线阅读

PDF下载

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 7

参考文献 14

相关文章 15

Metrics

推荐阅读 0