CooPeD: Co-owned Personal Data management

Lorena González-Manzano, Ana I. González-Tablas, José M. de Fuentes, Arturo Ribagorda
2014 Computers & security  
With the spread of Web-Based Social Networks (WBSNs) managing access to data is a challenging matter. Providing personalized, ne-grained access control is essential to build trusted WBSNs. WBSNs data can be associated with owners and co-owners, namely users who upload the data and users who are linked to uploaded data respectively. Thus, a privacy-friendly WBSN must allow users the management of elements related to them. In this regard, CooPeD (Co-owned Personal Data management), a system that
more » ... eals with co-ownership management of decomposable objects, is proposed. CooPeD is formed by a model and a mechanism. CooPeD is developed on the bases of SoN eU CON ABC usage control model. Particularly, an extension of SoN eU CON ABC is proposed to support co-ownership management by means of access control and administrative management. In CooPeD's mechanism objects, decomposed in parts, are attached to owners and co-owners who individually set their access control preferences. The evaluation of CooPeD consists of three parts. Firstly, a feasibility analysis for dierent architectures of CooPeD's model and mechanism, as well as of CooPeD's mechanism in Facebook is performed. Secondly, a prototype proves the feasibility of implementing CooPeD. Lastly, a survey study assesses the acceptance of CooPeD.
doi:10.1016/j.cose.2014.06.003 fatcat:a4k3exijbrad3nybfvcfvpgxn4