Distributed Data Federation without Disclosure of User Existence
Distributed Data Federation without Disclosure of User Existence
复制标题
不泄露用户存在的分布式数据联合
DOI：
10.1007/978-3-642-31540-4_22
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Akihiko Ohsuga
中科院分区：
文献类型：
--
作者：
Takao Takenouchi;Takahiro Kawamura;Akihiko Ohsuga
服务提供商收集与其业务相关的用户个人信息。不同服务提供商存储的个人信息预计将被合并，以提供新的服务。然而，特定的用户记录有被从组合的个人信息中识别的风险，并且用户的敏感信息可能被泄露。此外，由于安全问题，服务提供商收集的个人信息不得透露给其他服务提供商。因此，一些研究人员一直在研究分布式匿名协议，该协议将提供商存储的个人信息结合起来，并对其进行消毒，以确保匿名策略的最小披露。然而，当提供商具有不同的用户集合时，存在这样的问题，即可能暴露在任一服务提供商中的用户的存在。本文提出了一个新的概念，δ-max-site-presence，它表示用户在分布式环境中存在的概率，并提出了一个新的分布式匿名协议来隐藏用户的存在。我们的评估结果表明，所提出的协议可以匿名用户按照隐藏他们的存在和用户匿名的政策，没有太多的信息丢失。
Service providers collect user’s personal information relevant to their businesses. Personal information stored by different service providers is expected to be combined to make new services. However, specific user records risk being identified from the combined personal information, and the user’s sensitive information may be revealed. Also, personal information collected by a service provider must not be disclosed to other service providers because of security issues. Thus, several researchers have been investigating distributed anonymization protocols, which combine the personal information stored by the providers and sanitize it to ensure an anonymity policy with minimum disclosure. However, when providers have different sets of the users, there is a problem that the existence of users in either service provider may be revealed. This paper introduces a new notion,δ-max-site-presence, which indicates the probability of the existence of users being revealed in a distributed environment and a new distributed anonymization protocol for hiding the existence of users. Our evaluation results show that the proposed protocol can anonymize users in accordance with the policy of hiding their existence and user anonymity without too much information loss.