METHOD AND APPARATUS FOR CONTROLLING ACCESS IN A SOCIAL NETWORK SERVICE

• US 20140310519A1
• Filed: 04/10/2014
• Published: 10/16/2014
• Est. Priority Date: 04/10/2013
• Status: Active Grant

• Current Assignee: Foundation of Soongsil University-Industry Cooperation
• Original Assignee: Foundation of Soongsil University-Industry Cooperation
• Inventors: Yoo, MyungSik, Quan, Wenji
• Granted Patent: US 9,117,089 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065

Abstract

A key-based method for controlling access in a social network service includes: generating a core key and sub keys by segmenting a master key that is unique to a file owner, with the sub keys assigned differently to multiple groups that are divided according to trust level and relationship type; determining the group to which a file requester belongs by using at least one of a friend list of the file requester, a trust level between the file requester and the file owner, and a friend list of the file owner, and distributing a sub key corresponding to the determined group to the file requester, when the file requester requests a key distribution; and determining whether or not access to a file of the file owner is authorized by using the sub key distributed to the file requester and the core key, when the file requester requests the file.

Claims

1. A method of controlling access in a social network service, the method performed at an access control apparatus, the method comprising:

(a) generating a core key and a plurality of sub keys by segmenting a master key unique to a file owner, the plurality of sub keys assigned differently to a plurality of groups divided according to trust level and relationship type;

(b) determining a group to which a file requester belongs by using at least one of a friend list of the file requester, a trust level between the file requester and the file owner, and a friend list of the file owner, and distributing a sub key corresponding to the determined group to the file requester, when the file requester requests a key distribution; and

(c) determining whether or not access to a file of the file owner is authorized by using the sub key distributed to the file requester and the core key, when the file requester requests the file.

2. The method of claim 1, wherein the access control apparatus is at least one of a file owner terminal and a service server connected over a network with the owner terminal and a file requester terminal.

3. The method of claim 1, wherein the trust level is calculated by using at least one of an existence and number of replies and responses to a post made by the file owner, an existence, number, and duration of voice calls, and an existence and number of exchanged messages.

4. The method of claim 1, wherein the relationship type comprises at least one of a direct contact relationship between the file owner and the file requester and an indirect contact relationship based on a common friend existing in respective friend lists.

5. The method of claim 1, wherein the access control apparatus is a file owner terminal, and said step (b) comprises:

receiving a trust level of the file requester over a secure channel from a trust level database and determining the group to which the file requester belongs by using the received trust level, the friend list of the file owner terminal, and the friend list of the file requester, when a key distribution request message is received from a file requester terminal, the key distribution request message including an ID and the friend list of the file requester.

6. The method of claim 1, wherein said step (c) comprises:

receiving a file request message from a file requester terminal,

wherein the file request message includes at least one of a file requester ID, a file owner ID, and a sub key distributed beforehand according to the trust level and the relationship type with respect to the file owner.

7. A recorded medium readable by a computer, tangibly embodying a program of instructions for performing the method of claim 1.

8. An apparatus tor controlling access in a social network service, the apparatus comprising:

a key generation part configured to generate a core key and a plurality of sub keys by segmenting a master key unique to a file owner, the plurality of sub keys assigned differently to a plurality of groups divided according to trust level and relationship type;

a key distribution part configured to determine a group to which a file requester belongs by using at least one of a friend list of the file requester, a trust level between the file requester and the file owner, and a friend list of the file owner, and distribute a sub key corresponding to the determined group to the file requester when the file requester requests a key distribution; and

an authentication part configured to determine whether or not access to a file of the file owner is authorized by using the sub key distributed to the file requester and the core key, when the file requester requests the file.