Let Only the Right One IN: Privacy Management Scheme for Social Network
Let Only the Right One IN: Privacy Management Scheme for Social Network
复制标题
只让合适的人进来：社交网络隐私管理方案
DOI：
10.1007/978-3-642-10772-6_24
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
K. Srinathan
中科院分区：
文献类型：
--
作者：
Nagaraja Kaushik Gampa;R. A. Khot;K. Srinathan
当前的社交网站通过仅向有限的一组人（通常是朋友）提供用户数据来保护用户数据。然而，“朋友”的概念在社交网络中是虚幻的。在没有验证身份的情况下将一个人添加到好友列表中可能会导致许多严重后果，例如身份盗窃、隐私丢失等。我们提出了一种新颖的验证范例，以确保向 Alice 发送好友请求的人（Bob）实际上是她的朋友，而不是伪造身份的人。我们的解决方案基于鲍勃可能了解并验证的关于爱丽丝的信息。我们工作的前提是朋友比陌生人更了解一个人的喜好。为了验证我们的前提，我们进行了两阶段的用户研究。用户研究的结果令人鼓舞。我们相信我们的解决方案做出了重大贡献，即它利用基于偏好的身份验证和质询响应方案的优势的方式。
Current social networking sites protect user data by making it available only to a restricted set of people, often friends. However, the concept of ‘friend’ is illusory in social networks. Adding a person to the friends list without verifying his/her identity can lead to many serious consequences like identity theft, privacy loss, etc. We propose a novel verification paradigm to ensure that a person (Bob) who sends a friend request (to Alice) is actually her friend, and not someone who is faking his identity. Our solution is based on what Bob might know and verify about Alice. We work on the premise that a friend knows a person’s preferences better than a stranger. To verify our premise, we conducted a two stage user study. Results of the user study are encouraging. We believe our solution makes a significant contribution, namely, the way it leverages the benefits of preference based authentication and challenge response schemes.