Social network privacy by means of evolving access control

• US 8,370,895 B2
• Filed: 08/12/2010
• Issued: 02/05/2013
• Est. Priority Date: 08/12/2009
• Status: Active Grant

• Current Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Inventors: DiCrescenzo, Giovanni, Lipton, Richard J.
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US12/855,333
• Publication Number:
  US 20110197255A1
• Time in Patent Office: 908 Days
• Field of Search: 726/1, 726/2, 726/26
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A method and software product for limit privacy loss due to data shared in a social network, where the basic underlying assumptions are that users are interested in sharing data and cannot be assumed to constantly follow appropriate privacy policies. Social networks deploy an additional layer of server-assisted access control which, even under no action from a user, automatically evolves over time, by restricting access to the user'"'"'s data. The evolving access control mechanism provides non-trivial quantifiable guarantees for formally specified requirements of utility (i.e., users share as much data as possible to all other users) and privacy (i.e., users expose combinations of sensitive data only with low probability and over a long time).

Claims

1. A computer-implemented method of controlling privacy loss in a data sharing social network, the method comprising the steps of:

providing the data sharing social network containing a plurality of user data objects for sharing the plurality of user data objects with a plurality of users according to an access control policy;

dividing, by the computer, time into a sequence of time subintervals; and

updating, by the computer, the access control policy at each time subinterval by randomly resetting some of the plurality of user data objects as public or private.

2. The computer-implemented method of claim 1, wherein the updating depends upon at least one past attribute setting.

3. The computer-implemented method of claim 1, wherein the plurality of user data objects are images.

4. The computer-implemented method of claim 1, wherein the plurality of user data objects are text.

5. The computer-implemented method of claim 1, wherein the plurality of user data objects are computer files.

6. The computer-implemented method of claim 1, wherein a sensitive subset of the plurality of user data objects is set to private during as many as possible of the time subintervals.

7. The method of claim 1, wherein the data sharing social network comprises a website.

8. The method of claim 1, wherein the updating the access control policy comprises updating the access control policy at each time subinterval by randomly resetting some of the plurality of user data objects associated with a given one of the plurality of users as public or private.

9. The method of claim 1, wherein the updating the access control policy is performed by use of a probabilistic algorithm.

10. A computer readable device having computer readable program code for operating on a computer for controlling privacy loss in a data sharing social network, the program code, when executing, causing the computer to perform steps comprising:

providing the data sharing social network containing a plurality of user data objects for sharing the plurality of user data objects with a plurality of users according to an access control policy;

dividing time into a sequence of time subintervals; and

updating the access control policy at each time subinterval by randomly resetting some of the plurality of user data objects as public or private.

11. The computer readable device of claim 10, wherein the updating depends upon at least one past attribute setting.

12. The computer readable device of claim 10, wherein a sensitive subset of the plurality of data objects is set to private during as many as possible of the time subintervals.

13. The computer readable device of claim 10, wherein the data sharing social network comprises a website.

14. The computer readable device of claim 10, wherein the updating the access control policy comprises updating the access control policy at each time subinterval by randomly resetting some of the plurality of user data objects associated with a given one of the plurality of users as public or private.

15. The computer readable device of claim 10, wherein the updating the access control policy is performed by use of a probabilistic algorithm.