Oct 1, 2012
Cheng, Park, and Sandhu Receive Best Paper Award
Mr. Yuan Cheng (Ph.D. student), Dr. Jaehong Park, and Dr. Ravi Sandhu received a best paper award at the 4th IEEE International Conference on Information Privacy, Security, Risk and Trust 2012. The title of the paper was, "Relationship-based Access Control for Online Social Networks: Beyond User-to-User Relationships".
User-to-user (U2U) relationship-based access control has become the most prevalent approach for modeling access control in online social networks (OSNs), where authorization is typically made by tracking the existence of a U2U relationship of particular type and/or depth between the accessing user and the resource owner. However, today's OSN applications allow various user activities that cannot be controlled by using U2U relationships alone. In this paper, we develop a relationship-based access control model for OSNs that incorporates not only U2U relationships but also user-to-resource (U2R) and resource-to-resource (R2R) relationships. Furthermore, while most access control proposals for OSNs only focus on controlling user's normal usage activities, our model also captures controls on users' administrative activities. Authorization policies are defined in terms of patterns of relationship paths on social graph and the hopcount limits of these path. The proposed policy specification language features hopcount skipping of resource-related relationships, allowing more flexibility and expressive power. We also provide simple specifications of conflict resolution policies to resolve possible conflicts among authorization policies.
For more information, see the authors' web pages: