跨社交网络的隐私图片分享框架

doi:10.11959/j.issn.1000-436x.2019107

通信学报 ›› 2019, Vol. 40 ›› Issue (7): 1-13.doi: 10.11959/j.issn.1000-436x.2019107

• 学术论文 • 下一篇

跨社交网络的隐私图片分享框架

李凤华^1,^2,³,孙哲^1,²,牛犇¹(),曹进³,李晖³

¹ 中国科学院信息工程研究所，北京 100093
² 中国科学院大学网络空间安全学院，北京 100049
³ 西安电子科技大学网络与信息安全学院，陕西西安 710071

修回日期:2019-04-04 出版日期:2019-07-25 发布日期:2019-07-30
作者简介:李凤华（1966- ），男，湖北浠水人，博士，中国科学院信息工程研究所研究员、博士生导师，主要研究方向为网络与系统安全、信息保护、隐私计算。|孙哲（1987- ），男，安徽安庆人，中国科学院信息工程研究所博士生，主要研究方向为信息保护、隐私计算。|牛犇（1984- ），男，陕西西安人，博士，中国科学院信息工程研究所副研究员，主要研究方向为网络安全、隐私计算。|曹进（1985- ），男，陕西西安人，博士，西安电子科技大学副教授、硕士生导师，主要研究方向为应用密码学、安全协议分析、无线网络安全。|李晖（1968- ），男，河南灵宝人，博士，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线网络安全、云计算安全、信息论与编码理论。
基金资助:
国家重点研发计划基金资助项目(2017YFB0802203);国家自然科学基金资助项目(U1401251);国家自然科学基金资助项目(61672515);国家自然科学基金资助项目(61872441);工业和信息化部2018工业互联网创新发展工程项目“工业互联网标识解析数据管理技术标准制定与试验验证;中国科学院青年创新促进会人才资助项目(2018196)

Privacy-preserving photo sharing framework cross different social network

Fenghua LI^1,^2,³,Zhe SUN^1,²,Ben NIU¹(),Jin CAO³,Hui LI³

¹ Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China
² School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China
³ School of Cyber Engineering,Xidian University,Xi’an 710071,China

Revised:2019-04-04 Online:2019-07-25 Published:2019-07-30
Supported by:
The National Key Research and Development Program of China(2017YFB0802203);The National Natural Science Foundation of China(U1401251);The National Natural Science Foundation of China(61672515);The National Natural Science Foundation of China(61872441);2018 Industrial Internet Innovation and Development Project of China - “Technical Standard Formulation and Verification of Identifier Data Management for Identification and Resolution System;Youth Innovation Promotion Association CAS(2018196)

摘要/Abstract

摘要：

针对图片转发场景下隐私泄露的问题，提出了一种跨社交网络的隐私图片分享框架，可用于图片隐私信息的延伸控制和溯源取证。延伸控制方案利用基于传播链的访问控制模型限制后续用户的操作权限，并将隐私策略嵌入图片文件，通过图片加密算法保护图片隐私信息和隐私策略的机密性、完整性，确保用户隐私策略被正确执行。该方案不受限于任何现有社交网络图片分享平台，并且能够有效防止非授权转发造成的图片隐私信息泄露威胁。在此基础上，溯源取证方案记录用户的操作行为，并通过嵌套签名方案防止恶意用户篡改和伪造溯源记录，为跨社交网络的图片隐私侵犯行为溯源取证提供技术手段。实验结果验证了所提方案的有效性和效率。

关键词: 图片隐私, 延伸控制, 溯源取证, 社交网络

Abstract:

With rapid developments of digital photography and social networks,users of photo-sharing-supported social networking applications can easily forward photos across different social networks at the cost of their growing privacy concerns.To address this problem,a privacy-preserving photo sharing framework was proposed,which could apply to extended control and privacy invasion tracing.In extended control scheme,the following users on a dissemination chain was restrained by each user’s privacy policy.Then several privacy areas of photos were encrypted and the access control polices were bound to the uploaded photos,so that any privacy areas on the photos could be hidden away from unwanted viewers even across different social networks.On this basis,the behaviors of users were record by tracing scheme of privacy invasion,the integrality of records was protected by using nested signature algorithm.The correctness,security and performance of overhead of the scheme are then thoroughly analyzed and evaluated via detailed simulations.

Key words: photo privacy, extended control, privacy invasion tracing, social network

中图分类号:

TN929

李凤华,孙哲,牛犇,曹进,李晖. 跨社交网络的隐私图片分享框架[J]. 通信学报, 2019, 40(7): 1-13.

Fenghua LI,Zhe SUN,Ben NIU,Jin CAO,Hui LI. Privacy-preserving photo sharing framework cross different social network[J]. Journal on Communications, 2019, 40(7): 1-13.

图/表 11

表1

图1

图2

图3

图4

图5

图6

表2

图7

图8

图9

参考文献 32

[1]	HU H , AHN G J , JORGENSEN J . Multiparty access control for online social networks:model and mechanisms[J]. IEEE Transactions on Knowledge and Data Engineering, 2013,25(7): 1614-1627.
[2]	ILIA P , POLAKIS I , ATHANASOPOULOS E ,et al. Face/off:preventing privacy leakage from photos in social networks[C]// The 22nd ACM SIGSAC Conference on Computer and Communications Security. 2015: 781-792.
[3]	VISHWAMITRA N , LI Y , WANG K ,et al. Towards PII-based multiparty access control for photo sharing in online social networks[C]// The 22nd ACM on Symposium on Access Control Models and Technologies. 2017: 155-166.
[4]	XU K , GUO Y , GUO L ,et al. My privacy my decision:control of photo sharing on online social networks[J]. IEEE Transactions on Dependable and Secure Computing, 2017,14(2): 199-210.
[5]	LI F , LI Z , HAN W ,et al. Cyberspace-oriented access control:a cyberspace characteristics based model and its policies[J]. IEEE Internet of Things Journal, 2018,6(2): 1471-1483.
[6]	LI F , SUN Z , NIU B ,et al. HideMe:privacy-preserving photo sharing on social networks[C]// The 38th IEEE International Conference on Computer Communications. 2019: 154-162.
[7]	RA M R , GOVINDAN R , ORTEGA A . P3:toward privacy-preserving photo sharing[C]// The 10th USENIX Symposium on Networked Systems Design and Implementation. USENIX, 2013: 515-528.
[8]	ZHANG L , JUNG T , LIU C ,et al. Pop:privacy-preserving outsourced photo sharing and searching for mobile devices[C]// The 35th IEEE International Conference on Distributed Computing Systems. 2015: 308-317.
[9]	HE J , LIU B , KONG D ,et al. Puppies:transformation-supported personalized privacy preserving partial image sharing[C]// The 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks. 2016: 359-370.
[10]	SUN W , ZHOU J , ZHU S ,et al. Robust privacy-preserving image sharing over online social networks (OSNs)[J]. ACM Transactions on Multimedia Computing,Communications,and Applications, 2018,14(1):14.
[11]	李晖 . 隐私计算—面向隐私保护的新型计算[J]. 信息通信技术, 2018,12(6): 4-6.
	LI H . Privacy computing:a new computing model for privacy preserving[J]. Information and Communications Technologies, 2018,12(6): 4-6.
[12]	KARJOTH G , SCHUNTER M , WAIDNER M . Platform for enterprise privacy practices:privacy-enabled management of customer data[C]// Springer International Workshop on Privacy Enhancing Technologies. 2002: 69-84.
[13]	薛见新, 申德荣, 寇月 ,等. 面向数据融合的半环溯源计算方法[J]. 计算机研究与发展, 2016,53(2): 316-325.
	XUE J X , SHEN D R , KOU Y ,et al. Semiring provenance for data fusion[J]. Journal of Computer Research and Development, 2016,53(2): 316-325.
[14]	王梁, 周光焱, 王黎维 ,等. 不确定关系数据属性级溯源表示与概率计算[J]. 软件学报, 2014,25(4): 863-879.
	WANG L , ZHOU G Y , WANG L W ,et al. Attribute level lineage and probabilistic computation of uncertain data[J]. Journal of Software, 2014,25(4): 863-879.
[15]	SUN L , PARK J , NGUYEN D ,et al. A provenance-aware access control framework with typed provenance[J]. IEEE Transactions on Dependable and Secure Computing, 2016,13(4): 411-423.
[16]	张聿博, 张锡哲, 张斌 . 面向社交网络信息源定位的观察点部署方法[J]. 软件学报, 2014,25(12): 2837-2851.
	ZHANG Y B , ZHANG X Z , ZHANG B . Observer deployment method for locating the information source in social network[J]. Journal of Software, 2014,25(12): 2837-2851.
[17]	付安民, 秦宁元, 宋建业 ,等. 云端多管理者群组共享数据中具有隐私保护的公开审计方案[J]. 计算机研究与发展, 2015,52(10): 2353-2362.
	FU A M , QIN N Y , SONG J Y ,et al. Privacy-preserving public auditing for multiple managers shared data in the cloud[J]. Journal of Computer Research and Development, 2015,52(10): 2353-2362.
[18]	SUCH J M , CRIADO N . Resolving multi-party privacy conflicts in social media[J]. IEEE Transactions on Knowledge and Data Engineering, 2016,28(7): 1851-1863.
[19]	XU Y , PRICE T , FRAHM J M ,et al. Virtual U:defeating face liveness detection by building virtual models from your public photos[C]// The 25th USENIX Security Symposium. 2016: 497-512.
[20]	FOGUES R L , MURUKANNAIAH P K , SUCH J M ,et al. Sharing policies in multiuser privacy scenarios:Incorporating context,preferences,and arguments in decision making[J]. ACM Transactions on Computer-Human Interaction, 2017,24(1):5.
[21]	LI F , SUN Z , NIU B ,et al. SRIM scheme:an impression-management scheme for privacy-aware photo-sharing users[J]. Engineering, 2018,4(1): 85-93.
[22]	YUAN X , WANG X , WANG C ,et al. Enabling privacy-preserving image-centric social discovery[C]// The 34th IEEE International Conference on Distributed Computing Systems. IEEE, 2014: 198-207.
[23]	HE J , LIU B , BAO X ,et al. On privacy preserving partial image sharing[C]// The 35th IEEE International Conference on.Distributed Computing Systems. IEEE, 2015: 758-759.
[24]	FERREIRA B , RODRIGUES J , LEITAO J ,et al. Privacy-preserving content-based image retrieval in the cloud[C]// The 34th IEEE Symposium on Reliable Distributed Systems. IEEE, 2015: 11-20.
[25]	YUAN L , KORSHUNOV P , EBRAHIMI T . Secure JPEG scrambling enabling privacy in photo sharing[C]// The 11th IEEE International Conference and Workshops on Automatic Face and Gesture Recognition. IEEE, 2015,4: 1-6.
[26]	NOURIAN A , MAHESWARAN M . Privacy aware image template matching in clouds using ambient data[J]. The Journal of Supercomputing, 2013,66(2): 1049-1070.
[27]	PEARSON S , MONT M C , KOUNGA G . Enhancing accountability in the cloud via sticky policies[C]// Springer FTRA International Conference on Secure and Trust Computing,Data Management,and Application. 2011: 146-155.
[28]	SPYRA G , BUCHANAN W J , EKONOMOU E . Sticky policies approach within cloud computing[J]. Elsevier Computers ＆ Security, 2017,70: 366-375.
[29]	PARK J , NGUYEN D , SANDHU R . A provenance-based access control model[C]// The 10th Annual International Conference on Privacy,Security and Trust. 2012: 137-144.
[30]	BATES A M , TIAN D , BUTLER K R B ,et al. Trustworthy whole-system provenance for the Linux kernel[C]// The 24th USENIX security symposium. USENIX, 2015: 319-334.
[31]	李彪 . 微博中热点话题的内容特质及传播机制研究——基于新浪微博 6025 条高转发微博的数据挖掘分析[J]. 中国人民大学学报, 2013,27(5): 10-17.
	LI B . Research on content characteristics and communication mechanism of hot topics in weibo--data mining and analysis based on sina weibo 6025 highly retweeted microblogs[J]. Journal of Renmin University of China, 2013,27(5): 10-17.
[32]	ZHANG L , BO C , HOU J ,et al. Kaleido:you can watch it but cannot record it[C]// The 21st ACM Annual International Conference on Mobile Computing and Networking . 2015: 372-385.

安装应用个数	中国		美国		总体
安装应用个数	用户数/个	占比	用户数/个	占比	用户数/个	占比
未安装	13	3.83%	2	1.35%	15	3.08%
1～5个	172	50.74%	29	19.59%	201	41.27%
6～10个	76	22.42%	30	20.27%	106	21.77%
10个以上	78	23.01%	87	58.78%	165	33.88%

图片大小	低强度	中强度	高强度
200像素×150像素	117.79 ms	125.88 ms	142.68 ms
700像素×525像素	148.23 ms	158.31 ms	174.53 ms
1 200像素×900 像素	247.37 ms	264.13 ms	299.61 ms
1 700像素×1 275 像素	2.92 s	3.14 s	3.54 s
2 400像素×1 800 像素	4.90 s	5.24 s	5.87 s
2 800像素×2 100 像素	8.66 s	9.27 s	10.57 s
3 200像素×2 400 像素	12.52 s	14.32 s	16.23 s
4 032像素×3 024 像素	23.87 s	25.71 s	29.20 s

跨社交网络的隐私图片分享框架

Privacy-preserving photo sharing framework cross different social network

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献 32

相关文章 15

Metrics

推荐阅读 0

[1]	王璿, 张瑜, 周军锋, 陈子阳. 基于社交网络的影响力最大化算法[J]. 通信学报, 2022, 43(8): 151-163.
[2]	彭滔, 钟文韬, 王国军, 罗恩韬, 熊金波, 刘忆宁, Hao Wang. 移动社交网络中面向隐私保护的精确好友匹配[J]. 通信学报, 2022, 43(11): 90-103.
[3]	刘真,王娜娜,王晓东,孙永奇. 位置社交网络中谱嵌入增强的兴趣点推荐算法[J]. 通信学报, 2020, 41(3): 197-206.
[4]	顾秋阳, 琚春华, 吴功兴. 基于子图演化与改进蚁群优化算法的社交网络链路预测方法[J]. 通信学报, 2020, 41(12): 21-35.
[5]	陈晶,祁子怡. 基于时序关系的社交网络影响最大化算法研究[J]. 通信学报, 2020, 41(10): 211-221.
[6]	毕俊蕾,李致远. 机会社交网络中基于时变兴趣社区的查询消息路由算法[J]. 通信学报, 2019, 40(9): 86-94.
[7]	黄海平,王凯,汤雄,张东军. 基于边介数模型的差分隐私保护方案[J]. 通信学报, 2019, 40(5): 88-97.
[8]	王晓萌, 方滨兴, 张宏莉, 王星. TSL：基于连接强度的Facebook消息流行度预测模型[J]. 通信学报, 2019, 40(10): 1-9.
[9]	闫光辉, 张萌, 罗浩, 李世魁, 刘婷. 融合高阶信息的社交网络重要节点识别算法[J]. 通信学报, 2019, 40(10): 109-118.
[10]	付钰, 俞艺涵, 吴晓平. 大数据环境下差分隐私保护技术及应用[J]. 通信学报, 2019, 40(10): 157-168.
[11]	邓璐,贾焰,方滨兴,周斌,张涛,刘心. 分布式环境下话题发现算法性能分析[J]. 通信学报, 2018, 39(8): 176-184.
[12]	朱敬华,明骞. LBSN中融合信任与不信任关系的兴趣点推荐[J]. 通信学报, 2018, 39(7): 157-165.
[13]	曾勇,周灵杰,蒋忠元,刘志宏,马建峰. 基于奇异值分解的含权网络匿名化的安全性分析[J]. 通信学报, 2018, 39(5): 23-33.
[14]	李维皓,丁晟,孟佳洁,李晖. 基于位置服务中时空关联的隐私保护方案[J]. 通信学报, 2018, 39(5): 134-142.
[15]	石磊,杜军平,梁美玉. 基于RNN和主题模型的社交网络突发话题发现[J]. 通信学报, 2018, 39(4): 189-198.