Cryptographic Treatment of Private User Profiles

Felix Günther; Mark Manulis; Thorsten Strufe

Paper 2011/064

Cryptographic Treatment of Private User Profiles

Felix Günther, Mark Manulis, and Thorsten Strufe

Abstract

The publication of private data in user profiles in a both secure and private way is a rising problem and of special interest in, e.g., online social networks that become more and more popular. Current approaches, especially for decentralized networks, often do not address this issue or impose large storage overhead. In this paper, we present a cryptographic approach to \emph{private profile management} that is seen as a building block for applications in which users maintain their own profiles, publish and retrieve data, and authorize other users to access different portions of data in their profiles. In this course, we provide: (i) formalization of \emph{confidentiality} and \empf{unlinkability} as two main security and privacy goals for the data which is kept in profiles and users who are authorized to retrieve this data, and (ii) specification, analysis, and comparison of two private profile management schemes based on different encryption techniques.

Metadata

Available format(s): PDF
Category: Cryptographic protocols
Publication info: Published elsewhere. A preliminary version of this paper appears in Proceedings of FC 2011 / RLCPS Workshop. This is the full version.
Keywords: private user profiles social networks privacy access control
Contact author(s): mark @ manulis eu
History: 2011-02-08: received
Short URL: https://ia.cr/2011/064
License: CC BY

BibTeX

@misc{cryptoeprint:2011/064,
      author = {Felix Günther and Mark Manulis and Thorsten Strufe},
      title = {Cryptographic Treatment of Private User Profiles},
      howpublished = {Cryptology {ePrint} Archive, Paper 2011/064},
      year = {2011},
      url = {https://eprint.iacr.org/2011/064}
}