面向社会网络的个性化隐私策略定义与实施

为了实现社会网络中个性化隐私保护，提出了支持个性化隐私偏好授权模型，采用基于一阶逻辑隐私偏好描述语言，表达用户个性化隐私需求；引入基于主体属性的访问者－角色授权规则和基于客体标签的角色－权限指派规则，解决了动态用户授权和细粒度访问权限指派问题；分析了隐私策略冲突各种情况，实现了基于Prolog逻辑编程的策略一致性自动验证；设计了面向社会网络个性化隐私策略管理和实施中间件，将个性化隐私策略管理有效地集成到对既有资源的访问控制系统中，实验表明策略冲突分析具有良好的执行效率。

Specification and enforcement of personalized privacy policy for social network

An authorization model was proposed to support personalized privacy preferences in the first-logic privacy preference language.The language allowed users to express personalized privacy preferences.Visitor-role authorization rules based on the attributes of visitors and role-permission assignment rules based on the tags of objects were introduced,which resolve dynamic authorization and fine-grained rights assignment problems.Analyzed privacy policy conflict cases and realized policy consistency verification by Prolog logic programming.Designed a personalized privacy policy management and implementation middleware for social network.In the middleware,it integrated the management of personalized policy into access control system on the existing resources.The experiments show that the policy conflict analysis has good efficiency in the implementation.