$$SoNeUCON_{ABC}Pro$$SoNeUCONABCPro: An Access Control Model for Social Networks with Translucent User Provenance

Abstract

Abstract. Web-Based Social Networks (WBSNs) are used by millions of people worldwide. While WBSNs provide many benefits, privacy preservation is a concern. The management of access control can help to assure data is accessed by authorized users. However, it is critical to provide sufficient flexibility so that a rich set of conditions may be imposed by users. In this paper we coin the term user provenance to refer to tracing users actions to supplement the authorisation decision when users request access. For example restricting access to a particular photograph to those which have "liked" the owners profile. However, such a tracing of actions has the potential to impact the privacy of users requesting access. To mitigate this potential privacy loss the concept of translucency is applied. This paper extends SoN eU CONABC model and presents SoN eU CONABC P ro, an access control model which includes translucent user provenance. Entities and access control policies along with their enforcement procedure are formally defined. The evaluation demonstrates that the system satisfies the imposed goals and supports the feasibility of this model in different scenarios.

PACLP: a fine-grained partition-based access control policy language for provenance

“…Therefore, access control to the provenance data itself is required, so that it not only allows eligible users to access the provenance data, but also protects it from unauthorized access. Privacy and security of provenance are perceived as the main bottleneck to broad applications of provenance [27] [28] [29].…”