Although Social Network Service (SNS) providers like Facebook and Google attempt to mitigate security and privacy-related concerns of their users, abuses and misuses of personal data still make the headlines. As centralized storage of personal data is a decisive factor for unintended information disclosure, several architectures for decentralized Online Social Networks (OSNs) have been proposed. System designs range from solutions based on a decentralized client server architecture like Diaspora to P2P systems like PeerSoN. Despite all efforts to accomplish strong decentralization, most proposals cannot achieve sufficient informational self-determination, i.e., users do not have full control over storage and dissemination of their personal data and published content. In this paper we follow a contrary approach and present Vegas, a secure and privacy-preserving P2P OSN which restricts the possibility to browse the social graph to the ego network. We show how Vegas achieves a maximum degree of security and privacy through encryption and decentralization. We present our mobile Vegas prototype and its context-dependent communication channel decision model. Finally we show how Vegas can be extended to support services like social-search and directory services in a secure and privacy-preserving way.
展开▼
机译：尽管像Facebook和Google这样的社交网络服务（SNS）提供商试图减轻其用户的安全性和隐私相关问题，但个人数据的滥用和滥用仍然成为头条新闻。由于个人数据的集中存储是意外信息泄露的决定性因素，因此提出了用于分散式在线社交网络（OSN）的几种体系结构。系统设计范围从基于分散的客户端服务器体系结构（例如Diaspora）到P2P系统（例如PeerSoN）的解决方案。尽管尽了所有努力来实现强大的权力下放，但是大多数提议仍无法实现足够的信息自决，即用户无法完全控制其个人数据和已发布内容的存储和分发。在本文中，我们采用一种相反的方法，并提出了一种安全且保护隐私的P2P OSN Vegas，它限制了浏览社交图谱到自我网络的可能性。我们展示了拉斯维加斯如何通过加密和分散化来实现最大程度的安全性和隐私性。我们展示了我们的移动Vegas原型及其依赖于上下文的通信渠道决策模型。最后，我们展示了如何将Vegas扩展为以安全和隐私保护的方式支持社交搜索和目录服务等服务。
展开▼
