视频直播平台中的用户隐私保护研究

发布时间：2018-04-11 23:04

本文选题：隐私保护 + 教育直播平台　；参考：《浙江工商大学》2017年硕士论文

【摘要】：随着我国信息技术的发展与科技的进步,各种直播平台层出不穷,目前直播平台已经渗透到我们生活中的方方面面。而除了娱乐直播和商务类直播持续火热之外,教育直播这一新兴领域也逐渐受到资本市场和平台机构的青睐,不少直播平台相继推出教育直播。教育直播以其互动性强、自主性高和高效性等特点受到广大受教育人群和在线教育机构的热烈欢迎。虽然教育直播平台的蓬勃发展给我们带来很多便利,同时也给用户的隐私带来了很多威胁,这些直播平台对用户隐私信息的保护严重缺失,平台中用户的隐私信息被窃取后可能会造成严重后果。在此背景下,设计并实现考虑用户隐私的视频直播平台,无论在理论研究还是在实际应用中都具有重要意义。本文首先阐述了考虑用户隐私的视频直播平台的研究背景与意义,并对隐私保护领域的主要研究方向及其国内外研究现状做了详细介绍。其次本文结合视频直播平台的设计,研究了一些密码学中的关键技术。文章阐述了密码学中的一些加密算法,并对他们的优缺点进行分析。文章还研究了 JavaFX浏览器框架,它能够将本文中由Java编写的密码学算法逻辑组件的生成结果嵌入到Web页面进行提交,并将信息处理组件以注入的形式与其交互,适合用于实现本文中的视频直播平台。接着针对目前教育类直播平台普遍存在的隐私泄露问题,本文详细阐述了考虑用户隐私的视频直播平台的设计,针对教育类用户,将班级设置为标签并对传递在用户和权限管理服务器之间的数据进行加密保护。本文提出对多标签支持和主动匹配的方案;本文还考虑到用户之间的关注关系会发生变化的需求,我们提出的权限撤回方案进一步满足对用户隐私保护的需求。本文实现了考虑用户隐私的视频直播平台。平台设计的核心是基于RSA盲签名的OPRF算法。整个平台中对信息所有的加密和解密操作都是在用户的本地客户端进行的,而平台权限管理服务器对用户加密后的标签信息会进行盲匹配。学生用户和教师用户在发布和验证关注请求时,双方不需要同步在线,并且所有的加解密操作都是在平台用户的客户端上自动完成的,用户在平台上的操作像在其它平台上的操作一样简单方便。最后我们对平台进行分析和实验测试,并对实验结果进行仔细分析。经过实验和分析对比,平台的安全性和性能完全符合我们的预期,在满足安全性的同时,平台完全符合实际应用的需要。
[Abstract]:With the development of information technology and the progress of science and technology in our country, all kinds of live broadcast platforms emerge in endlessly. At present, live broadcast platforms have penetrated into every aspect of our life.In addition to entertainment and business live broadcast continues to be hot, the emerging field of live education is also gradually favored by the capital market and platform organizations, many live broadcast platforms have launched educational live broadcasting.Because of its strong interaction, high autonomy and high efficiency, direct education is warmly welcomed by the masses of educated people and online educational institutions.Although the vigorous development of educational broadcasting platform brings us a lot of convenience, but also brings a lot of threats to the privacy of users, these platforms have a serious lack of protection of users' privacy information.The privacy information of the user in the platform may have serious consequences when it is stolen.In this context, it is of great significance to design and implement a live video platform considering user privacy, both in theoretical research and in practical applications.In this paper, the research background and significance of the video broadcasting platform considering user privacy are introduced, and the main research directions in the field of privacy protection and the current research situation at home and abroad are introduced in detail.Secondly, based on the design of live video platform, some key techniques in cryptography are studied.This paper describes some encryption algorithms in cryptography and analyzes their advantages and disadvantages.This paper also studies the JavaFX browser framework, which can embed the generated result of the cryptographic algorithm logic component written by Java in this paper into the Web page for submission, and interacts with the information processing component in the form of injection.Suitable for the implementation of the video live platform in this paper.Then, aiming at the problem of privacy divulging in the current educational live broadcast platform, this paper elaborates the design of the video broadcast platform considering user privacy, aiming at the educational users.Set the class to label and encrypt the data passed between the user and the rights management server.In this paper, we propose a scheme of multi-label support and active matching, and consider the need of changing the relationship of concern between users, and we propose a scheme to withdraw authority to further satisfy the need of privacy protection.In this paper, a video broadcasting platform considering user privacy is implemented.The core of platform design is OPRF algorithm based on RSA blind signature.All the encryption and decryption operations of the information in the whole platform are carried out in the local client of the user, and the user's encrypted label information will be blindly matched by the platform privilege management server.Students and teachers do not need to synchronize online when issuing and verifying concern requests, and all encryption and decryption operations are done automatically on the client side of the platform user.The user's operation on the platform is as simple and convenient as the operation on other platforms.Finally, we analyze and test the platform, and analyze the experimental results carefully.Through experiment and analysis and comparison, the security and performance of the platform completely meet our expectations, while satisfying the security, the platform completely meets the needs of practical application.
【学位授予单位】：浙江工商大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;TP393.092

【参考文献】