基于信任管理的普适社交网安全和隐私保护关键技术研究

Social networking has extended its popularity from the Internet to mobile domain. Nowadays, mobile Internet and cellular networks can work together with self-organized ad hoc networks to offer advanced Pervasive Social Networking (PSN). PSN is the social networking that supports instant social activities at any time and in any place in a universal manner. It operates based on heterogeneous networks organized by multiple types of networks. Security and privacy protection are crucial issues to support the fast development of PSN, while trust plays a decisive role in social activities. However, the literature still lacks specific and systematic studies on its security and privacy. In this research, we investigate PSN security and privacy protection technologies based on trust management according to the specific characteristics of PSN and the role of trust in social communications, which are outlined as follows..First, we explore the trustworthiness and privacy preservation of trust evaluation in PSN. We focus on studying the robustness of trust evaluation against various attacks and pursue a solution for privacy preserving trust evaluation in order to enhance the theoretical foundation of trust management in our research..Second, we explore the specific characteristics of PSN and investigate data access control protocols based on multi-dimensional trust levels that control PSN data access adapting to different social networking scenarios and heterogeneous network architecture. Meanwhile, corresponding key management is researched. The result will contribute to ensure trustworthy PSN communications..Third, we study the role of trust in PSN and then develop an anonymous trust authentication scheme for PSN. In order to achieve high efficiency, we further explore batch signature verification for this scheme. The research results will benefit identity privacy preservation and ensure trustworthy social networking at the same time..When this research is completed, we will solve three scientific problems: the trust and privacy of trust evaluation; the adaptability of PSN data access control and the anonymity of authentication on trust. We will achieve a suit of algorithms, protocols and schemes based on trust management to ensure security and privacy of PSN, including privacy-preserving trust evaluation schemes, adaptive data access control protocols, and anonymous trust authentication schemes. The contributions of this research will provide a theoretic foundation and a practical design reference for establishing a trustworthy pervasive social environment. They can be further applied to realize trust management, trusted communications, privacy preservation and intrusion detection and defense in the context of PSN.

普适社交网是指由异构网络支撑的普适存在且支持即时社交活动的社交网络。普适社交网的安全和隐私保护是关系其发展的重要课题，但目前仍缺乏针对性和系统性研究。本项目从普适社交网结构特性和信任在社交中的作用出发，研究基于信任管理的普适社交网安全和隐私保护关键技术。具体包括：研究具有隐私保护的可信信任评估方法，增强信任管理的理论基础；探索基于信任评估和管理的自适应数据访问控制协议，为普适社交网安全通信提供理论基础和关键技术支撑；研制匿名信任认证协议，在保护社交身份隐私的同时支持可信普适社交。从而解决信任评估自身的信任及隐私保护、数据访问控制的自适应和信任的匿名认证三个难题。项目完成后将获得一系列基于信任管理的普适社交网安全和隐私保护算法和协议，为建立可信普适社交环境提供理论和方法参考。成果应用于普适社交网信任管理、可信通信、隐私保护和攻击检测防御。

普适社交网是指由异构网络支撑的普适存在且支持即时社交活动的社交网络。普适社交网的安全和隐私保护是关系其发展的重要课题。本项目从普适社交网结构特性和信任在社交中的作用出发，研究基于信任管理的普适社交网安全和隐私保护关键技术。具体包括：隐私保护的可信信任评估；基于信任评估和管理的自适应数据访问控制协议；匿名信任认证；研发普适社交网安全和隐私保护原型系统、实现以上研究所形成的算法和协议，测试其实际性能，并进行应用演示和用户测试。解决了信任评估自身的信任及隐私保护、数据访问控制的自适应和信任的匿名认证三个难题。项目获得一系列基于信任管理的普适社交网安全和隐私保护算法和协议，具体包括：隐私保护的密文数据处理方案、上下文自适应的可验证计算技术、基于数据融合和挖掘的信任评估方法、基于区块链的去中心化信任评估方法、多维信任等级控制的数据访问方案、D2D安全通信协议、中心化/半中心化/去中心化的匿名信任认证方案等。项目执行期间获得最佳期刊和会议论文奖各一项，发表和录用了30篇论文，中科院二区及以上或CCF-B类及以上21篇，ESI高被引论文一篇、成果已经被他人多次引用。授权国际专利9项，申请PCT国际专利5项和中国发明专利3项，所有国际专利均被工业界采纳，荣获诺基亚卓越发明人奖。研发完成5个原型验证系统。项目成果为建立可信普适社交环境提供了理论和方法参考，可应用于普适社交网信任管理、可信通信、隐私保护和攻击检测防御，并为构建自组可信网络提供了可靠依据。