Building confederated web-based services with Priv.io

Zhang, Liang; Mislove, Alan

doi:10.1145/2512938.2512943

Cited by 7 publications

(8 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…ABE was often used to support a complicated access policy in the cloud storage services [8,29,44]. However, schemes like [8,44] do not support user revocations.…”

Section: Related Workmentioning

confidence: 99%

“…These simple solutions do not support multi-party collaboration between organizations and individuals without a help from a trusted third party. To address this shortcoming, attribute-based encryption (ABE) [14,34] techniques are often utilized in data storage [8,29,39,41,44] to support a more fine-grained access control mechanism. ABE is a public key cryptographic system, in which a user encrypts the data using the public keys which are shared with other users so that they can decrypt the encrypted data using their private keys.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Cryptographically Enforced Access Control with a Flexible User Revocation on Untrusted Cloud Storage

Kim

Nepal

2016

Data Sci. Eng.

View full text Add to dashboard Cite

Cloud storage services have become ubiquitous. A large number of individuals and organizations are using them to store and share data, taking the benefits of mobility and affordability offered by these services. However, secure management of data in cloud storage services, more specifically supporting multi-party sharing in the context of a collaboration, is a challenging problem. The problem is further exacerbated if the data owner does not have any trust on the cloud storage providers and the data need regular updates from collaborating parties. A number of cryptographically enforced secure cloud storage solutions have been proposed to address this problem. One of the key issues with these solutions is the revocation of access to data for invalid users without moving the data (in the era of big data) and relying on the cloud service providers. In this paper, we introduce a cloud storage system that offers cryptographically enforced security. In contrast to other cryptographically protected cloud storage systems, our system supports a fine-grained access control mechanism and allows flexible revocations of invalid users without moving the data and relying on the cloud service providers. Our system employs an attribute-based encryption technique to support a complex access structure that allows a user to define human readable access policies to the data in the cloud storage. In addition, our system supports a flexible revocation scheme that can revoke invalid users directly by updating the revoked users' list or indirectly by updating an epoch counter. The system administrator can choose one of these options flexibly depending on the needs. Our system also allows authorized users to update the encrypted data, and any users accessing such updated data in future can verify whether the data are modified by authorized users.

show abstract

“…ABE was often used to support a complicated access policy in the cloud storage services [8,29,44]. However, schemes like [8,44] do not support user revocations.…”

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

A Cryptographically Enforced Access Control with a Flexible User Revocation on Untrusted Cloud Storage

Kim

Nepal

2016

Data Sci. Eng.

View full text Add to dashboard Cite

show abstract

“…Gossple is an anonymous social network that helps users build new relationships with others based on mutual interests [7]. Priv.io [38] builds a decentralized web based platform to securely share data. Contrail is a communication platform that provides content filtering in decentralized social networks [33].…”

Section: Related Workmentioning

confidence: 99%

“…Additionally, OSNs have predictive capabilities about the users as they continuously gather user data. Researchers have tried to address privacy concerns by user-based key management [6,12,14,34], peer-to-peer architectures [8,9,11,13,25,27,32,36], or decentralized platforms [1,3,20,30,31,33,35,38]. In general, peer-to-peer OSN architectures suffer from inefficiency due to high churn rate of users.…”

Section: Introductionmentioning

confidence: 99%

POSN: A Personal Online Social Network

Erdin

Klukovich

Gunduz

et al. 2015

ICT Systems Security and Privacy Protection

View full text Add to dashboard Cite

Abstract. A growing concern for end users of Online Social Networks (OSNs) is the privacy and control of user data due to the client-server architecture of the current ecosystems. In this paper, we introduce a privacy preserving decentralized OSN platform, which mimics real life social interactions. In particular, we decentralize the OSN platform and give direct control of the information to the user. The distributed platform removes central authorities from the OSN and users share their content only with intended peers through mobile devices. This decentralized system ensures that interaction happens between friends and third parties cannot access the user content or relationships. To be able to efficiently share objects and provide timely access in the POSN platform, we take advantage of free storage clouds to distribute encrypted user content. The combination of phone-to-phone applications with cloud infrastructure would address the availability limitation of peer-to-peer systems, while enjoying the benefits of peer-to-peer systems, such as no central authority and scalability.

show abstract

“…Recent technologies promise to alleviate user privacy concerns. For example, distributed recommender systems can put a limit to privacy disclosure [21], deployment of OSNs in the cloud can avoid the centralization of user data [44,46], techniques for picture encryption [43] and content anonymization [38] can prevent undesired access to private content.…”

Section: Related Workmentioning

confidence: 99%

Online privacy as a collective phenomenon

Sarigol

García

Schweitzer

2014

Proceedings of the Second ACM Conference on Online Social Networks

View full text Add to dashboard Cite

The problem of online privacy is often reduced to individual decisions to hide or reveal personal information in online social networks (OSNs). However, with the increasing use of OSNs, it becomes more important to understand the role of the social network in disclosing personal information that a user has not revealed voluntarily: How much of our private information do our friends disclose about us, and how much of our privacy is lost simply because of online social interaction? Without strong technical effort, an OSN may be able to exploit the assortativity of human private features, this way constructing shadow profiles with information that users chose not to share. Furthermore, because many users share their phone and email contact lists, this allows an OSN to create full shadow profiles for people who do not even have an account for this OSN.We empirically test the feasibility of constructing shadow profiles of sexual orientation for users and non-users, using data from more than 3 Million accounts of a single OSN. We quantify a lower bound for the predictive power derived from the social network of a user, to demonstrate how the predictability of sexual orientation increases with the size of this network and the tendency to share personal information. This allows us to define a privacy leak factor that links individual privacy loss with the decision of other individuals to disclose information. Our statistical analysis reveals that some individuals are at a higher risk of privacy loss, as prediction accuracy increases for users with a larger and more homogeneous first-and second-order neighborhood of their social network. While we do not provide evidence that shadow profiles exist at all, our results show that disclosing of private information is not restricted to an individual choice, but becomes a collective decision that has implications for policy and privacy regulation.Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from Permissions@acm.org.

show abstract

Building confederated web-based services with Priv.io

Cited by 7 publications

References 30 publications

A Cryptographically Enforced Access Control with a Flexible User Revocation on Untrusted Cloud Storage

A Cryptographically Enforced Access Control with a Flexible User Revocation on Untrusted Cloud Storage

POSN: A Personal Online Social Network

Online privacy as a collective phenomenon

Contact Info

Product

Resources

About