RePriCo: Resolving Multi-party Privacy Conflicts in Social Media

上传到社交媒体的数千亿个项目由多个用户共同拥有，但只有上传项目的用户才被允许设置其隐私设置（即，谁可以访问该项目）。这是一个巨大且严重的问题，因为用户对共同拥有的项目的隐私偏好通常冲突，因此仅应用一方的偏好会导致具有严重后果的隐私侵犯（例如，用户失去工作、被网络跟踪等）。这个问题的解决方案是最及时的，因为它已被强调为一个适当的在线隐私管理要解决的最重要的问题之一。这个问题的一个例子是一张照片，其中爱丽丝和鲍勃被描绘在一起：他们如何才能同意他们将与第三方共享照片？主流社交媒体只允许Alice（假设她上传了该项目）设置照片的隐私设置，但如果Bob不想与Alice的一些朋友分享呢？在过去几年中提出了一些初步的办法，但这些办法有一些局限性，使它们在实践中不适用。用户被迫尝试手动解决此类冲突（通过电子邮件、电话等），因为社交网络非常动态且规模巨大，所以这是令人疲惫的。更重要的是，手动解决冲突的过程开始得太晚了，当一个用户已经发布了项目，隐私侵犯已经发生。RePriCo最令人兴奋，新颖和突破性的部分将是基于新的自动协商技术的自动冲突检测和解决机制。特别是，RePriCo的主要挑战将是自动建议冲突的解决方案，使这些解决方案在大多数情况下被用户接受，而不需要手动解决冲突。这既雄心勃勃又冒险，因为它需要了解如果用户自己手动解决冲突，他们将如何实际达成协议。RePriCo的假设是，用户的谈判行为是显着影响用户的关系和他们的实力（现有的证据似乎支持），计算谈判机制应该基于此，以产生可接受的结果。RePriCo的主要贡献之一将是关于用户关系如何影响谈判行为的强大经验基础。RePriCo将在许多方面具有很大的变革性：（i）它将使用户能够管理他们对多方共同拥有的项目的隐私;（ii）它将考虑用户实际上可以接受的内容以及促成这种情况的因素，这是以前解决多方隐私冲突的方法从未考虑过的;以及（iii）它将开发的经验基础不仅将影响RePriCo的自动冲突检测和解决机制，而且还有助于推动该主题的研究。

Hundreds of billions of items that are uploaded to Social Media are co-owned by multiple users, yet only the user that uploads the item is allowed to set its privacy settings (i.e., who can access the item). This is a massive and serious problem as users' privacy preferences for co-owned items usually conflict, so applying the preferences of only one party leads to privacy violations with severe consequences (e.g., users losing their jobs, being cyberstalked, etc.). A solution to this problem is most timely as it has been highlighted as one of the most important problems to be addressed for an appropriate online privacy management. An example of this problem is a photo in which Alice and Bob are depicted together: how can they agree on the third parties they will share the photo with? Mainstream Social Media would only allow Alice (assuming she uploads the item) to set the privacy settings for the photo, but what if Bob would not like to share with some of Alice's friends? Some initial approaches have been proposed in the past few years, but these have a number of limitations that make them unsuitable in practice. Users are forced to try to resolve such conflicts manually (by e-mail, phone calls, etc.), which is exhausting because social networks are very dynamic and huge in scale. Even more importantly, the process of resolving conflicts manually starts too late, when one user has already posted the item and the privacy violation has occurred.RePriCo's most exciting, novel, and ground-breaking part will be the automated conflict detection and resolution mechanism based on new automated negotiation technologies. In particular, RePriCo's main challenge will be to automatically suggest solutions to the conflicts in such a way that these solutions are accepted by users most of the time and they do not need to resolve the conflicts manually. This is both ambitious and adventurous, as it requires understanding how users would actually reach an agreement if they were to solve the conflicts themselves manually. RePriCo's hypothesis is that users' negotiation behaviour is significantly influenced by users' relationships and their strength (as existing evidences seem to support), and that a computational negotiation mechanism should be based on this in order to produce acceptable outcomes. One of the main contributions of RePriCo will be a strong empirical base about how users' relationships influence negotiation behaviour. RePriCo will be highly transformative in many aspects: (i) it will empower users to manage their privacy for multi-party co-owned items; (ii) it will consider what is actually acceptable for users and the factors that contribute to that, which no previous approach to solve multi-party privacy conflicts has considered before; and (iii), the empirical base it will develop will not only influence RePriCo's automated conflict detection and resolution mechanisms but also help push research on the topic forward.