A layered secret sharing scheme for automated profile sharing in OSN groups

Guillaume Smith*, Roksana Boreli, Mohamed Ali Kaafar

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference proceeding contributionpeer-review

4 Citations (Scopus)

Abstract

We propose a novel Layered secret sharing scheme and its application to Online Social Networks (OSNs). In current, commercially offered OSNs, access to users’ profile information is managed by the service provider e.g. Facebook or Google+, based on the user defined privacy settings. A limited set of rules such as those governing the creation of groups of friends as defined by the user (e.g. circles, friend groups or lists) allow the users to define different levels of privacy, however they are arguably complex and rely on a trusted third party (the service provider) to ensure compliance. The proposed scheme enables automated profile sharing in OSN groups with fine grained privacy control, via a multi-secret sharing scheme comprising layered shares, created from user’s profile attributes (multiple secrets), that are distributed to group members; with no reliance on a trusted third party. The scheme can be implemented via e.g. a browser plugin, enabling automation of all operations for OSN users. We study the security of the scheme against attacks aiming to acquire knowledge about user’s profile. We also provide a theoretical analysis of the resulting level of protection for specific (privacy sensitive) attributes of the profile.

Original languageEnglish
Title of host publicationMobile and Ubiquitous Systems
Subtitle of host publicationComputing, Networking, and Services : 10th International Conference, MOBIQUITOUS 2013, revised selected papers
EditorsIvan Stojmenovic, Zixue Cheng, Song Guo
Place of PublicationBerlin
PublisherSpringer, Springer Nature
Pages487-499
Number of pages13
ISBN (Electronic)9783319115696
ISBN (Print)9783319115689
DOIs
Publication statusPublished - 2014
Externally publishedYes
Event10th International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, MOBIQUITOUS 2013 - Tokyo, Japan
Duration: 2 Dec 20134 Dec 2013

Publication series

NameLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
Volume131
ISSN (Print)1867-8211

Conference

Conference10th International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, MOBIQUITOUS 2013
CountryJapan
CityTokyo
Period2/12/134/12/13

Fingerprint Dive into the research topics of 'A layered secret sharing scheme for automated profile sharing in OSN groups'. Together they form a unique fingerprint.

Cite this