Persona: an online social network with user-defined privacy
Persona: an online social network with user-defined privacy
复制标题
DOI：
10.1145/1592568.1592585
复制
发表时间：
2009-08
期刊：
影响因子：
--
通讯作者：
Randolph Baden;Adam Bender;N. Spring;Bobby Bhattacharjee;D. Starin
中科院分区：
文献类型：
--
作者：
Randolph Baden;Adam Bender;N. Spring;Bobby Bhattacharjee;D. Starin
在线社交网络（OSN）非常受欢迎，有些人声称拥有超过2亿用户。用户使用OSN应用程序共享私人内容，例如个人信息或照片。用户必须信任OSN服务，以保护个人信息，即使OSN提供商从检查和共享这些信息中受益。我们提出了Persona，一个OSN，用户可以决定谁可以访问他们的信息。Persona通过基于属性的加密（ABE）隐藏用户数据，允许用户对谁可以查看他们的数据应用细粒度的策略。Persona提供了一种创建应用程序的有效方法，在该应用程序中，用户（而不是OSN）定义访问私有数据的策略。我们展示了新的加密机制，提高了ABE的普遍适用性。我们展示了Persona如何提供现有在线社交网络的功能，并提供额外的隐私优势。我们描述了一个实现的人物角色，复制Facebook的应用程序，并显示人物角色提供了可接受的性能时，浏览隐私增强的网页，即使在移动的设备上。
Online social networks (OSNs) are immensely popular, with some claiming over 200 million users. Users share private content, such as personal information or photographs, using OSN applications. Users must trust the OSN service to protect personal information even as the OSN provider benefits from examining and sharing that information. We present Persona, an OSN where users dictate who may access their information. Persona hides user data with attribute-based encryption (ABE), allowing users to apply fine-grained policies over who may view their data. Persona provides an effective means of creating applications in which users, not the OSN, define policy over access to private data. We demonstrate new cryptographic mechanisms that enhance the general applicability of ABE. We show how Persona provides the functionality of existing online social networks with additional privacy benefits. We describe an implementation of Persona that replicates Facebook applications and show that Persona provides acceptable performance when browsing privacy-enhanced web pages, even on mobile devices.