Fine%20Grained%20Access%20Control%20in%20Online%20Social%20Networks

1
Fine Grained Access Control in Online Social
Networks

• Amin Tootoonchian
• Geoff Salmon
• A. Ziad Hatahet

2
The Story

• People produce lots of personal digital content
• They want to share their content with friends
• Some content should be shared only with friends
• Access control influences what people share

3
Current Approach
?
4
What Counts as a Good Solution?

• Web services host personal content
• High availability
• Lots of bandwidth
• Access control based on owners true social
  network
• Decouple personal content and social network!
• Only the owner needs to have an account on web
  service

5
?
6
Proposed Solution

• For each friend
• Define appropriate relationships
• Give proof of relationships to the friend
• For each piece of content
• Create an ACL listing relations that have access
• Web service verifies proof grants access to
  content
• Requires server support

7
ImageLock - A Hack
Real Fake Photos
Fake URL
Owner
Friend

ImageLock
Ducks ACL Real URL
ACL Real URL
Proof
Real URL
8
Conclusion

• Access control influences what people share
• Social access control is well suited for personal
  content
• But multiple social networks are cumbersome
• Users store their own complete social network
• Eg. address book
• ImageLock gives
• Users a taste of social access control
• Web services incentive to support it