An Autonomous Social Web Privacy Infrastructure with Context-Aware Access Control

Abstract

Abstract. The rise of online social networks (OSNs) has traditionally been accompanied by privacy concerns. These typically stem from facts: First, OSN service providers' access to large databases with millions of user profiles and their exploitation. Second, the user's inability to create and manage different identity facets and enforce access to the self as in the real world. In this paper, we argue in favor of a new paradigm, decoupling the management of social identities in OSNs from other social network services and providing access controls that take social contexts into consideration. For this purpose, we first propose Priamos, an architecture for privacy-preserving autonomous management of social identities and subsequently present one of its core components to realize contextaware access control. We have implemented a prototype to evaluate the feasibility of the proposed approach.

Privacy in Social Networks: Existing Challenges and Proposals for Solutions

“…Once the algorithm has been executed, the clusters are presented to the user for refinement and approval [13]. [12], based on the Core RBAC model [7] Managing Visibility: A Trust-Based Access Control Model. Besides managing contacts, one of the main drawbacks of existing SNSs is the underlying access control model which is used to define which contacts can see a particular item.…”

“…However, as stated by Grimmelmann "[people] think about privacy in terms of social rules and social roles, not in terms of access-control lists and file permissions" [8]. In order to incorporate the different levels of trust SNS users have in their contacts, in [12] we propose to extend the existing access control models by incorporating contextual information such as trust and time. Figure 10 depicts the extended access control model.…”

“…Once a contact wants to access this item, the previously defined contextual constraint is evaluated. If the contact's trust value is higher than the trust value required to see the item, access is granted while otherwise access is denied [12].…”

“…Relation between SNS stakeholders, their goals, and core concepts [11] While a variety of research focuses on protecting SNS users' privacy from overly powerful SNS service providers (e.g. [1][2][3]12]), this work concentrates on means to protect personal data from other SNS users. Its aim is to present existing challenges for SNS privacy and proposals for solutions by presenting our research efforts in this area.…”

Dynamic Access Control Model for Security Client Services in Smart Grid

“…Its implementation and application technologies can be devised in various forms [8][9][10]. Recently, security-related areas that consider context awareness have received attention, and various studies on several security models have been actively carried out [11][12][13]. It is necessary to study a new access control security model, applying this to the smart grid environment to provide security services according to time, space, and user context.…”