在线社交网络中延伸访问控制机制研究  

Research on extended access control mechanism in online social network

作　　者：谢绒娜[1] 范晓楠 袁琳 郭子晨 朱家玉 史国振[1] XIE Rongna;FAN Xiaonan;YUAN Lin;GUO Zichen;ZHU Jiayu;SHI Guozhen(Department of Cryptography and Science Technology,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]北京电子科技学院密码与科学技术系,北京100070

出　　处：《网络与信息安全学报》2021年第5期123-131,共9页Chinese Journal of Network and Information Security

基　　金：国家重点研发计划(2017YFB0802705);国家自然科学基金(61932015)。

摘　　要：针对社交网络中用户发布的数据延伸不可控的问题,提出了一种基于隐私标签的延伸控制机制。该机制基于用户关系跳数和资源转发跳数给用户和数据分配不同类型的隐私标签,以实现对数据的细粒度延伸访问控制。提出了隐私标签的生成算法和分配方法,设计了隐私标签约束规则并对可能出现的策略冲突进行分析。最后通过测试,表明了该机制可以实现社交网络中细粒度延伸控制,同时证明了该机制的安全性和有效性。Aiming at the problem of inability to extend control over the data published by users in social networks,an extended access mechanism based on privacy labels was proposed.This mechanism granted users and data different types of labels based on the number of user relationship hops and resource forwarding hops,so as to achieve fine-grained extended access control to the data.The generation algorithm and distribution method of privacy labels were proposed.The constraint rules of privacy label were designed and the possible policy conflicts were analyzed.Finally,the test proves that the mechanism achieves fine-grained extended control in social networks,and proves its security and validity of the mechanism.

关 键 词：在线社交网络 隐私标签 延伸控制 隐私保护 信息安全 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]