Fine-grained access control scheme for social network with transitivity

doi:10.3724/SP.J.1087.2013.00008

Journal of Computer Applications ›› 2013, Vol. 33 ›› Issue (01): 8-11.DOI: 10.3724/SP.J.1087.2013.00008

• Network and distributed techno • Previous Articles Next Articles

Fine-grained access control scheme for social network with transitivity

GAO Xunbing¹,MA Chunguang¹,²,ZHAO Ping¹,XIAO Liang¹

1. College of Computer Science and Technology, Harbin Engineering University, Harbin Heilongjiang 150001, China
2. Network and Data Security Key Laboratory of Sichuan Province (University of Electronic Science and Technology of China), Chengdu Sichuan 611731, China

Received:2012-08-27 Online:2013-01-09 Published:2013-01-01
Contact: GAO Xunbing

社交网络中具有可传递性的细粒度访问控制方案

高训兵¹,马春光¹,²,赵平¹,肖亮¹

1. 哈尔滨工程大学计算机与科学技术学院，哈尔滨 150001
2. 网络与数据安全四川省重点实验室(电子科技大学)，成都 611731

通讯作者: 高训兵
作者简介:高训兵(1987-)，男，山东德州人，硕士研究生，主要研究方向：密码学、信息安全；马春光(1974-)，男，黑龙江双鸭山人，教授，博士，博士生导师，主要研究方向：密码学、信息安全、传感网与物联网、网络编码；赵平(1986-)，女，江苏徐州人，硕士研究生，主要研究方向：信息安全、物联网；肖亮(1987-)，男，湖北黄冈人，硕士研究生，主要研究方向：信息安全、网络编码。
基金资助:
国家自然科学基金资助项目(51169007);网络与数据安全四川省重点实验室开放课题(201107);黑龙江省教育厅科学技术研究项目(12513049)

Abstract

Abstract: A fine-grained access control scheme based on Attribute-Based Encryption (ABE) was proposed to satisfy the demands for the protection of personal privacy in social network. The scheme realized the description for different granularity of members in social network through the setting of the property, which is the basis for the fine-grained encryption and access control. In particular, a proxy server was introduced to judge the relationship between the unauthorized members and authorized members. If the unauthorized members were judged to have the access rights, the key generation center would generate private keys for them based on ABE. The scheme achieved the transitivity of the access rights. Compared with other privacy protection methods based on access control or encryption technique, the proposed scheme combined access control with encryption and realized encryption and fine-grained access control at the same time.

Key words: social network, Attribute-Based Encryption (ABE), fine-grained, access control, transitivity

摘要： 针对社交网络中隐私保护的需求，基于属性基加密(ABE)算法，提出了一种权限可传递性的细粒度访问控制方案。在方案中通过属性的设置实现了社交网络成员不同粒度的刻画，为细粒度加密和访问提供了基础；同时在方案中引入了代理服务器，对非授权成员与授权成员之间的关系进行分析，从而判定非授权成员的访问权限。若该成员可以获得访问权限，密钥生成中心依据授权成员的属性为其生成解密密钥，进而实现访问权限的传递性。与其他基于访问控制或加密技术的隐私保护方案相比，所提方案将对数据的访问控制和加密保护相统一，在实现数据加密的同时，提供细粒度的访问控制；并结合社交网络的特点实现了访问权限的传递性。

关键词: 社交网络, 属性基加密, 细粒度, 访问控制, 可传递性

CLC Number:

TP393.08

GAO Xunbing MA Chunguang ZHAO Ping XIAO Liang. Fine-grained access control scheme for social network with transitivity[J]. Journal of Computer Applications, 2013, 33(01): 8-11.

高训兵马春光赵平肖亮. 社交网络中具有可传递性的细粒度访问控制方案[J]. 计算机应用, 2013, 33(01): 8-11.

References

［1］TOOTOONCHIAN A, SAROIU S, GANJALI Y, et al. Lockr: better privacy for social networks ［C］// CoNEXT'09: Proceedings of 〖HJ1.45mm〗the 5th International Conference on Emerging Networking Experiments and Technologies. New York: ACM Press, 2009: 169-180.

［2］BADEN R, BENDER A, SPRING N, et al. Persona: an online so-cial network with user-defined privacy ［C］// SIGCOMM'09: Proceedings of the ACM SIGCOMM 2009 Conference on Data Communication. New York: ACM Press, 2009: 135-146.

［3］CUTILLO L A, MOLVA R, STRUFE T. Safebook: a privacy-preserving online social network leveraging on real-life trust ［J］. IEEE Communications Magazine, 2009, 47(12): 94-101.

［4］SIMPSON A. On the need for user-defined fine-grained access control policies for social networking applications ［C］// Proceedings of the Workshop on Security in Opportunistic and Social Networks. New York: ACM Press, 2008: 1-8.

［5］CARMINATI B, FERRARI E, PEREGO A. Enforcing access control in Web-based social networks ［EB/OL］. ［2012-03-18］. http://www.dicom.uninsubria.it/dawsec/pubs/snwac.pdf.

［6］张胜兵，蔡皖东，李勇军.一种基于博弈论的社交网络访问控制方法［J］.西北工业大学学报,2011,29(4):652-657.

［7］SUN J Y, ZHU X Y, FANG Y G. A privacy-preserving scheme for online social networks with efficient revocation ［C］// INFOCOM 2010: Proceedings of the 29th Conference on Information Communications. Piscataway: IEEE Press, 2010: 2516-2524.

［8］LUO W Y, XIE Q, HENGARTNER U. Facecloak: an architecture for user privacy on social networking sites ［C］// CSE'09: Proceedings of the 2009 International Conference on Computational Science and Engineering. Piscataway: IEEE Press, 2009: 26-33.

［9］SAHAI A, WATERS B. Fuzzy identity-based encryption ［C］// EUROCRYPT 2005: Proceedings of the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 3494. Berlin: Springer, 2005: 457-473.

［10］GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based en-cryption for fine-grained access control of encrypted data ［C］// Proceedings of the 13th ACM Conference on Computer and Communications Security. New York: ACM Press, 2006: 89-98.

［11］YU S C, WANG C, REN K, et al. Attribute based data sharing with attribute revocation ［C］// ASIACCS'10: Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security. New York: ACM Press, 2010: 261-270.

［12］CHEUNG L, NEWPORT C. Provably secure ciphertext policy ABE ［C］// Proceedings of the 14th ACM Conference on Computer and Communications Security. New York. ACM Press, 2007: 456-465.

［13］王文强.属性基加密及签名体制的研究［D］.郑州：信息工程大学,2010.

［14］CHASE M. Multi-authority attribute based encryption ［C］// TCC'07: Proceedings of the 4th Conference on Theory of Cryptography. Berlin: Springer, 2007: 515-534.

［15］BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption ［C］// SP'07: Proceedings of the 2007 IEEE Symposium on Security and Privacy. Washington, DC: IEEE Computer Society, 2007: 321-334.

[1]	Chenyang LI, Long ZHANG, Qiusheng ZHENG, Shaohua QIAN. Multivariate controllable text generation based on diffusion sequences [J]. Journal of Computer Applications, 2024, 44(8): 2414-2420.
[2]	Xinrui LIN, Xiaofei WANG, Yan ZHU. Academic anomaly citation group detection based on local extended community detection [J]. Journal of Computer Applications, 2024, 44(6): 1855-1861.
[3]	Xin LI, Liyong BAO, Hongwei DING, Zheng GUAN. MAC layer scheduling strategy of roadside units based on MEC server priority service [J]. Journal of Computer Applications, 2024, 44(4): 1227-1235.
[4]	Haihan WANG, Yan ZHU. Offensive speech detection with irony mechanism [J]. Journal of Computer Applications, 2024, 44(4): 1065-1071.
[5]	Meihong CHEN, Lingyun YUAN, Tong XIA. Data classified and graded access control model based on master-slave multi-chain [J]. Journal of Computer Applications, 2024, 44(4): 1148-1157.
[6]	Gaimei GAO, Jin ZHANG, Chunxia LIU, Weichao DANG, Shangwang BAI. Privacy protection scheme for crowdsourced testing tasks based on blockchain and CP-ABE policy hiding [J]. Journal of Computer Applications, 2024, 44(3): 811-818.
[7]	Tao SUN, Zhangtian DUAN, Haonan ZHU, Peihao GUO, Heli SUN. Social event recommendation method based on unexpectedness metric [J]. Journal of Computer Applications, 2024, 44(3): 760-766.
[8]	Jing LIANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Traceability storage model of charity system oriented to master-slave chain [J]. Journal of Computer Applications, 2024, 44(12): 3751-3758.
[9]	Rui GAO, Xuebin CHEN, Zucuan ZHANG. Dynamic social network privacy publishing method for partial graph updating [J]. Journal of Computer Applications, 2024, 44(12): 3831-3838.
[10]	Gaimei GAO, Mingbo DUAN, Yaling XUN, Chunxia LIU, Weichao DANG. SM9-based attribute-based searchable encryption scheme with cryptographic reverse firewall [J]. Journal of Computer Applications, 2024, 44(11): 3495-3502.
[11]	Shiliang LIU, Yi WANG, Yinglong MA. Non-overlapping community detection with imbalanced community sizes [J]. Journal of Computer Applications, 2024, 44(11): 3396-3402.
[12]	Huan ZHANG, Jingyu WANG, Lixin LIU, Xiaoyu JIANG. Multi-organization collaborative data sharing scheme with dual authorization [J]. Journal of Computer Applications, 2024, 44(10): 3307-3314.
[13]	Li LI, Chunyan YANG, Jiangwen ZHU, Ronglei HU. User plagiarism identification scheme in social network under blockchain [J]. Journal of Computer Applications, 2024, 44(1): 242-251.
[14]	Haiying MA, Jinzhou LI, Jikun YANG. Blockchain-based decentralized attribute-based encryption scheme for revocable attributes [J]. Journal of Computer Applications, 2023, 43(9): 2789-2797.
[15]	Shijie PENG, Hongmei CHEN, Lizhen WANG, Qing XIAO. Hybrid point-of-interest recommendation model based on geographic preference ranking [J]. Journal of Computer Applications, 2023, 43(8): 2448-2455.

Fine-grained access control scheme for social network with transitivity

社交网络中具有可传递性的细粒度访问控制方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics