A User-to-User Relationship-Based Access Control Model for Online Social Networks

Yuan Cheng (1) , Jaehong Park (1) , Ravi Sandhu (1)

1 ICS - Institute for Cyber Security (University of Texas at San Antonio)

Users and resources in online social networks (OSNs) are interconnected via various types of relationships. In particular, user-to-user relationships form the basis of the OSN structure, and play a significant role in specifying and enforcing access control. Individual users and the OSN provider should be allowed to specify which access can be granted in terms of existing relationships. We propose a novel user-to-user relationship-based access control (UURAC) model for OSN systems that utilizes regular expression notation for such policy specification. We develop a path checking algorithm to determine whether the required relationship path between users for a given access request exists, and provide proofs of correctness and complexity analysis for this algorithm.

Mots clés: Access Control; Security; Social Networks

Domaines: Informatique [cs]

Yuan Cheng, Jaehong Park, Ravi Sandhu. A User-to-User Relationship-Based Access Control Model for Online Social Networks. 26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. pp.8-24, ⟨10.1007/978-3-642-31540-4_2⟩. ⟨hal-01534764⟩