面向服务的移动通信用户隐私保护体系架构及关键技术

未来移动通信将服务于各垂直行业，用户在网络接入、数据传输和服务使用环节面临身份隐私、数据隐私、位置隐私泄露的风险。现有研究没从服务于垂直行业的需求来考虑，未成体系，难以满足不同行业用户差异化的隐私需求。针对该问题，我们拟采用“安全即服务”的思想，建立基于SOA的移动通信用户隐私保护体系架构。在网络接入环节，通过物理层密钥提取为认证协议提供安全信道，设计基于假名集合和具有“递进式解密”功能的KP-ABE保护身份标识的方法，保护身份隐私；在数据传输环节，构建面向安全能力开放的“三元”信任模型，并设计终端能力适配的端到端密钥协商方法和基于安全需求工程的传输数据自适应保护方法，保护数据隐私；在服务使用环节，建立位置隐私保护与QoS间的博弈模型，提出基于信任机制的分布式K匿名和抗时空关联分析的假位置隐私保护方法，保护位置隐私。本课题的研究期望为移动通信用户隐私保护提供理论依据与技术支撑。

Future mobile communication will serve vertical industries. In his network access, data transmission and service enjoyment, a user's identity, data and location privacy information may be disclosed. However, existing investigations do not consider the requirements of vertical industries, and they are loosely coupled and incapable of forming an integral system, thereby failing to protect the users' privacy in mobile communication. To address this problem, we will establish an SOA-based privacy protection architecture for mobile communication users, adopting the concept of “security as a service”. Specifically, when accessing network, by employing the physical layer key extraction, a secure channel is established to protect authentication protocol exchanges. Alternatively, the users' identifiers in these protocols are protected by using a pseudonym set or KP-ABE with progressive decryption function. Furthermore, to preserve the data privacy in transit, a security-capacity-open oriented three-party trust model is established, based on which we will propose a mobile terminal capacity adaptive end-to-end key agreement method, as well as an adaptive data transmission protection method. Finally, for the service enjoyment, we will establish a game model between a user's privacy protection and QoS, and present the distributed K-anonymity privacy protection method based on trust mechanism and the dummy-based privacy protection method against spatial-temporal correlation analysis, protecting the user's location privacy. This investigation is expected to provide theoretical and technical support for privacy protection in mobile communication networks.