半去中心化的社交网访问控制方案  

Semi-decentralization based access control mechanism for social networks

作　　者：陈庆余[1] 刘建伟[1] 刘靖[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191

出　　处：《计算机工程与应用》2011年第20期85-87,95,共4页Computer Engineering and Applications

基　　金：国家高技术研究发展计划(863)(No.2009AA01Z418);中央高校基本科研业务费专项资金资助(No.YWF1002009)~~

摘　　要：提出一种将社交网网络服务与用户的数据资源管理相分离的半去中心化的社交网隐私保护方案。通过对其直接好友颁布并保存到关系服务器上的关系声明来明确用户与其好友之间的关系类型,以关系类型和访问深度作为参数定义数据资源的访问控制规则,利用关系服务器验证访问请求者与资源拥有者之间的关系路径,将关系路径与访问控制规则进行比较以决定是否授权访问。实现了依据用户指定的关系类型和深度进行授权控制,进而保护了社交网中用户数据资源的隐私。This paper presents a privacy preserving scheme based on semi-decentralization.In this scenario, social networks sites only provide basic application services while users＇ resources are managed by themselves in the client side.Users clarify the relationship types with their direct friends to the relationship server, authorized users are denoted in terms of relationship types and depth,relationship paths between owner and requestor are checked out by relationship server.Only the requestor who meets the access rules can grant access to a resource.Thus the users＇ resources privacy from unauthorized access is protected in social networks.

关 键 词：社交网 半去中心化 隐私保护 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]