用户账号分权限的社交登录隐私保护平台

摘要

Social networking sites introduce third-party websites to enrich their own applications and enhance user experience, but threaten to user privacy at the same time, and even threaten to the user personal and property safety. This paper adopts the authority separation of user account technique to reduce the risk of privacy leakage, that is different user account corresponding different authority contains different user privacy. We suggest user logining social networking sites with elevated-privileges account (primary account) defaultly, while authorizing third-party applications with low-privileged account (sub account).The technique can realize quick switch between different accounts while not affecting the user experience. The system does not rely on user vigilance consciousness, playing a role to protect user privacy.%社交网站引入第三方网站来丰富自身应用，增强用户体验，但同时会造成用户隐私信息泄露，甚至给用户的人身财产安全带来威胁。文章采用用户账号权限分离技术以降低用户隐私泄露风险，即用户拥有包含不同隐私信息的账号，同时这些账号对应不同的权限，默认以高权限账号（主账号）来进行社交网站的日常登录操作，以低权限账号（副账号）授权第三方应用。在不影响用户体验的情况下，该技术能实现在不同账号间的快速切换。系统不依赖于用户的警觉意识，起到了保护用户隐私的作用。