计算机工程与应用 ›› 2011, Vol. 47 ›› Issue (20): 85-87.

• 网络、通信、安全 • 上一篇    下一篇

半去中心化的社交网访问控制方案

陈庆余,刘建伟,刘 靖   

  1. 北京航空航天大学 电子信息工程学院,北京 100191
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2011-07-11 发布日期:2011-07-11

Semi-decentralization based access control mechanism for social networks

CHEN Qingyu,LIU Jianwei,LIU Jing   

  1. Shcool of Electronics & Information Engineering,Beihang University,Beijing 100191,China
  • Received:1900-01-01 Revised:1900-01-01 Online:2011-07-11 Published:2011-07-11

摘要:

提出一种将社交网网络服务与用户的数据资源管理相分离的半去中心化的社交网隐私保护方案。通过对其直接好友颁布并保存到关系服务器上的关系声明来明确用户与其好友之间的关系类型,以关系类型和访问深度作为参数定义数据资源的访问控制规则,利用关系服务器验证访问请求者与资源拥有者之间的关系路径,将关系路径与访问控制规则进行比较以决定是否授权访问。实现了依据用户指定的关系类型和深度进行授权控制,进而保护了社交网中用户数据资源的隐私。

关键词: 社交网, 半去中心化, 隐私保护, 访问控制

Abstract: This paper presents a privacy preserving scheme based on semi-decentralization.In this scenario,social networks sites only provide basic application services while users’ resources are managed by themselves in the client side.Users clarify the relationship types with their direct friends to the relationship server,authorized users are denoted in terms of relationship types and depth,relationship paths between owner and requestor are checked out by relationship server.Only the requestor who meets the access rules can grant access to a resource.Thus the users’ resources privacy from unauthorized access is protected in social networks.

Key words: social networks, semi-decentralization, privacy preserving, access control