Research on extended access control mechanism in online social network

Rongna XIE; Xiaonan FAN; Lin YUAN; Zichen GUO; Jiayu ZHU; Guozhen SHI

doi:10.11959/j.issn.2096-109x.2021075

您当前的位置：

首页 >

文章列表页 >

Research on extended access control mechanism in online social network

Papers | 更新时间：2024-06-03

- Research on extended access control mechanism in online social network
- Chinese Journal of Network and Information Security Vol. 7, Issue 5, Pages: 123-131(2021)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021075
  CLC： TP302
- Online First：2021-10，
  
  Published：15 October 2021
- 稿件说明：
移动端阅览
Rongna XIE, Xiaonan FAN, Lin YUAN, et al. Research on extended access control mechanism in online social network[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 123-131.
DOI：

Rongna XIE, Xiaonan FAN, Lin YUAN, et al. Research on extended access control mechanism in online social network[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 123-131. DOI： 10.11959/j.issn.2096-109x.2021075.

摘要

针对社交网络中用户发布的数据延伸不可控的问题，提出了一种基于隐私标签的延伸控制机制。该机制基于用户关系跳数和资源转发跳数给用户和数据分配不同类型的隐私标签，以实现对数据的细粒度延伸访问控制。提出了隐私标签的生成算法和分配方法，设计了隐私标签约束规则并对可能出现的策略冲突进行分析。最后通过测试，表明了该机制可以实现社交网络中细粒度延伸控制，同时证明了该机制的安全性和有效性。

Abstract

Aiming at the problem of inability to extend control over the data published by users in social networks

an extended access mechanism based on privacy labels was proposed.This mechanism granted users and data different types of labels based on the number of user relationship hops and resource forwarding hops

so as to achieve fine-grained extended access control to the data.The generation algorithm and distribution method of privacy labels were proposed.The constraint rules of privacy label were designed and the possible policy conflicts were analyzed.Finally

the test proves that the mechanism achieves fine-grained extended control in social networks

and proves its security and validity of the mechanism.

关键词

Keywords

references

TIWARI B , KUMAR A . Role-based access control through on-demand classification of electronic health record [J ] . International Journal of Electronic Healthcare , 2015 , 8 ( 1 ): 9 .

GATES C E , . Access control requirements for Web 2.0 security and privacy [C ] // Proceedings of Workshop on Web 2.0 Security and Privacy . 2007 : 249 - 256 .

姚瑞欣 , 李晖 , 曹进 . 社交网络中的隐私保护研究综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 4 ): 33 - 43 .

YAO R X , LI H , CAO J . Overview of privacy preserving in social network [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 4 ): 33 - 43 .

FONG P W L , . Relationship-based access control:protection model and policy language [C ] // ACM Conference on Data ＆ Application Security ＆ Privacy . 2011 : 191 - 202 .

RIZVI S Z R , FONG P W L , CRAMPTON J , et al . Relationship-based access control for an open-source medical records system [C ] // The 20th ACM Symposium . 2015 : 113 - 124 .

GUO L , ZHANG C , FANG Y . A Trust-based privacy-preserving friend recommendation scheme for online social networks [J ] . IEEE Transactions on Dependable and Secure Computing , 2015 , 12 ( 4 ): 413 - 427 .

CHENG Y , PARK J , SANDHU R . A user-to-user relationship-based access control model for online social networks [J ] . IEEE Transactions on Dependable ＆ Secure Computing , 2017 , 13 ( 4 ): 1 - 1 .

CHENG Y , PARK J , SANDHU R . Attribute-aware relationship-based access control for online social networks [M ] . Data and Applications Security and Privacy XXVIII . Springer Berlin Heidelberg , 2014 : 292 - 306 .

李凤华 , 孙哲 , 牛犇 , 等 . 跨社交网络的隐私图片分享框架 [J ] . 通信学报 , 2019 , 40 ( 7 ): 1 - 13 .

LI F H , SUN Z , NIU B , et al . Privacy-preserving photo sharing framework cross different social network [J ] . Journal on Communications , 2019 , 40 ( 7 ): 1 - 13 .

ANSHELEVICH E , BHARDWAJ O , USHER M . Friend of my friend:network formation with two-hop benefit [J ] . Theory of Computing Systems , 2015 , 57 ( 3 ): 711 - 752 .

陈天柱 , 郭云川 , 牛犇 , 等 . 面向社交网络的访问控制模型和策略研究进展 [J ] . 网络与信息安全学报 , 2016 , 2 ( 8 ): 1 - 9 .

CHEN T Z , GUO Y C , NIU B , et al . Research progress of access control model and policy in online social networks [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 8 ): 1 - 9 .

唐文 , 陈钟 , 段云所 . 公钥密码技术 [J ] . 网络安全技术与应用 , 2001 : 61 - 64 .

TANG W , CHEN Z , DUAN Y S . Public key cryptography [J ] . Network Security Technology and Application , 2001 : 61 - 64 .

李凤华 , 孙哲 , 吕梦凡 , 等 . 社交照片隐私保护机制研究进展 [J ] . 信息安全学报 , 2018 ( 2 ): 41 - 61 .

LI F H , SUN Z , LYU M F , et al . Research progress of photo privacy-preserving mechanisms in online social network [J ] . Journal of Cyber Security , 2018 ( 2 ): 41 - 61 .

KARJOTH G U , SCHUNTER M , WAIDNER M . Platform for enterprise privacy practices:Privacy-enabled management of customer data [C ] // International Conference on Privacy Enhancing Technologies . 2002 : 69 - 84 .

BAKER E . EXIF Custom:Automatic image metadata extraction for Scratchpads and Drupal [J ] . Biodiversity Data Journal , 2013 , 1 ( 1 ): e973 .

杨晓锋 . 数码图像文件格式标准 Exif 解读 [J ] . 照相机 , 2006 ( 4 ): 69 - 71 .

YANG X F . Interpretation of digital image file format standard Exif [J ] . Camera , 2006 ( 4 ): 69 - 71 .

Views

291

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Bidirectional privacy authorization for large models based on private set intersection

Research on searchable encryption scheme based on enhanced PIR

Differential privacy protection method for localization of ADS-B message positioning data oriented to LBS

FL-IoV: comprehensive intrusion detection method for internet of vehicles based on federated learning

Secure aggregation for semi-decentralized federated learning under heterogeneous data

Related Author

YANG Shuai

HAN Yiliang

WU Xuguang

FENG Haokang

WANG Yuanyuan

TANG Liang

MA Limin

YANG Hongyu

Related Institution

Key Laboratory of Counter-Terrorism Command Information Engineering of the Ministry of Education, Engineering University of PAP

College of Cryptography Engineering, Engineering University of PAP

College of Computer Science，Beijing Information Science and Technology University

Beijing Academy of Educational Science

School of Computer Science and Technology, Civil Aviation University of China

⁰