Access control method of user private data of online social networks

Abstract

The invention provides an access control method of user private data of online social networks. The method comprises steps of/that when a data creator creates an object shared to a social network, encrypting the client by use of a system public key thereof and a defined access control strategy and loading the encrypted object and the access control strategy to a social network server; each user of the social network has a unique identity identification code and an attribute set including subjective attributes and objective attributes of the user; and when an indirect sharer does not have direct social relationship with the data creator makes a request for sharing of the object towards a direct visitor who has obtained the object, by judging whether the objective attribute of an indirect visitor satisfies the access control strategy defined by the data creator, controlling the visit of the indirect visitor. According to the invention, while encryption and storage of user data on a server end are achieved, requirements on access control of fine granularity and sustainability are met, so a problem that the data creator fails to control the indirect visitor to visit the object in the prior art is solved.

Description

technical field [0001] The invention relates to the field of online social networks (OSNs, Online Social Networks), in particular to an access control method for private data of online social network users. Background technique [0002] When traditional online social network access control implements fine-grained access control (AccessControl), user data (such as photos, videos, text data, etc. uploaded by users) are stored in plain text on the server of the online social network. The method requires that the online social network service provider must be credible. If the server is attacked or the service provider is guarded and stolen, the security of the user's private data will not be guaranteed. However, if the data is encrypted and stored on the server, it will affect the design and implementation of access control policies, making it difficult to achieve fine-grained access control. At present, the method that can realize both fine-grained access control policies and ...

AI Technical Summary

Problems solved by technology

[0003] The usage control (UsageControl, UCON) theory and architecture can realize the continuity of the control strategy, thereby solving the problem of controllable use of data, but the current usage control method is mainly used in the field of distributed network information system and digital copyright management, usage control strategy The definition of is not applicable to the application in the social network environment, and the encryption of data in the use control method adopts the traditional symmetric or asymmetric encryption system, which cannot meet the needs of fine-grained control strategy customization in the online social network application environment , at the same time, the distribution and management of the key also causes a huge pressure on the storage and calculation of the user terminal, especially not suitable for social network users using mobile terminals

Images