跨社交网络的隐私图片分享框架  

Privacy-preserving photo sharing framework cross different social network

作　　者：李凤华[1,2,3] 孙哲 牛犇[1] 曹进 李晖[3] LI Fenghua;SUN Zhe;NIU Ben;CAO Jin;LI Hui(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China;School of Cyber Engineering,Xidian University,Xi’an 710071,China)

机构地区：[1]中国科学院信息工程研究所,北京100093 [2]中国科学院大学网络空间安全学院,北京100049 [3]西安电子科技大学网络与信息安全学院,陕西西安710071

出　　处：《通信学报》2019年第7期1-13,共13页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2017YFB0802203);国家自然科学基金资助项目(No.U1401251,No.61672515,No.61872441);工业和信息化部2018工业互联网创新发展工程项目“工业互联网标识解析数据管理技术标准制定与试验验证”;中国科学院青年创新促进会人才资助项目(No.2018196)~~

摘　　要：针对图片转发场景下隐私泄露的问题,提出了一种跨社交网络的隐私图片分享框架,可用于图片隐私信息的延伸控制和溯源取证。延伸控制方案利用基于传播链的访问控制模型限制后续用户的操作权限,并将隐私策略嵌入图片文件,通过图片加密算法保护图片隐私信息和隐私策略的机密性、完整性,确保用户隐私策略被正确执行。该方案不受限于任何现有社交网络图片分享平台,并且能够有效防止非授权转发造成的图片隐私信息泄露威胁。在此基础上,溯源取证方案记录用户的操作行为,并通过嵌套签名方案防止恶意用户篡改和伪造溯源记录,为跨社交网络的图片隐私侵犯行为溯源取证提供技术手段。实验结果验证了所提方案的有效性和效率。With rapid developments of digital photography and social networks, users of photo-sharing-supported social networking applications can easily forward photos across different social networks at the cost of their growing privacy concerns. To address this problem, a privacy-preserving photo sharing framework was proposed, which could apply to extended control and privacy invasion tracing. In extended control scheme, the following users on a dissemination chain was restrained by each user’s privacy policy. Then several privacy areas of photos were encrypted and the access control polices were bound to the uploaded photos, so that any privacy areas on the photos could be hidden away from unwanted viewers even across different social networks. On this basis, the behaviors of users were record by tracing scheme of pri- vacy invasion, the integrality of records was protected by using nested signature algorithm. The correctness, security and performance of overhead of the scheme are then thoroughly analyzed and evaluated via detailed simulations.

关 键 词：图片隐私 延伸控制 溯源取证 社交网络 

分 类 号：TN929[电子电信—通信与信息系统]