Affiliations: [a]
COMSATS University Islamabad, Pakistan
| [b]
Massey University, Auckland, New Zealand
| [c]
The University of Auckland, New Zealand
| [d] Department of IT, SBBU-SBA, Sindh Pakistan
| [e]
Montclair State University, United States
Abstract: Privacy of data is a basic requirement for all types of applications but is especially relevant to online social networks. These systems allow users to share personal data with their friends and thus rightfully desire to have enriched social interactions. Current access control models fulfill basic requirements of individual users but struggle to meet needs of social interactions such as multiparty privacy, politeness and asymmetric, non-reciprocal and intransitive nature of relationships. A personalized access control model, based on the social relations model and the socio-technical design paradigm, is proposed in this paper to satisfy these requirements. The model is formulated through extreme formal modeling and implemented through Facebook APIs. The model’s expressiveness is examined for overlapping policies of multiple users, its consistency is analyzed for conflicting and redundant policies and user acceptance testing is performed for validity. The results suggest that the proposed technique outperformed the existing one to secure data in multiparty interactions.
Keywords: Access control model, multi-party privacy, online social networks, social
relations model, socio-technical design
