面向社交网络的多方授权模型  

Multi-party Authorization Model for Social Networks

作　　者：霍颖瑜[1] 马莉[1] 钟勇[1] 秦小麟[2] 

机构地区：[1]佛山科学技术学院电子与信息工程学院,佛山528000 [2]南京航空航天大学信息安全研究所,南京210016

出　　处：《计算机科学》2016年第1期116-121,共6页Computer Science

基　　金：国家自然科学基金(61373015;11326123);广东省教育厅育苗工程项目(2013LYM0097);佛山市科技发展专项资金项目(2012AA100251);佛山科学技术学院科研项目资助

摘　　要：现有的访问控制机制大多局限在用户个人空间内的数据,难以控制个人空间以外的数据,例如用户不能对其在朋友空间中发布的评论进行访问控制,不能对共有的资源进行联合访问控制等。面向社交网络的多方授权模型MRuleSN采用单一所有、多方共有的方法处理所有权问题,采用扩展的w-Datalog规则表达授权,具有更强的灵活性、访问细粒度和表达能力。分析并说明了模型的规则结构、授权语言的语法和语义,最后通过示例说明了该模型的应用和表达能力。Most of the current access control mechanisms focus on data of private space of users,which cannot control the data beyond the personal space,such that the remarks published by a user in the space of his friend cannot be controlled by the user and the shared resource cannot be controlled jointly by the sharer.The paper presented the MRuleSN,a multi-party authorization model for social networks.The model processes the problem of ownership by single ownership and multi-party shareholders,and adopts extended w-Datalog rules to express authorization,which owns more powerful flexibility,fine-grained access control and authorization expressiveness.The rule structure,syntax and semantic of authorization language of the model were analyzed and explained.Finally,application and expressiveness of the model were exampled and discussed.

关 键 词：多方授权 社交网络 授权规则 w-Datalog 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]