面向隐私保护的第三方个人信息服务平台研究

发布时间：2019-02-22 06:55

【摘要】：在信息时代，网络用户个人信息已然成为企业增强与保持竞争力的重要资本，，随着个人信息应用价值的凸显，网络用户面临的隐私泄露与滥用问题也日益严峻，并成为制约互联网稳健发展的重要因素。对网络环境中个人信息主要交互模式的个人信息管理与应用现状分析表明：一方面用户对其个人信息的存储、传递与应用尚不能保障足够的管理权限；另一方面，由各个网站存储所需个人信息，数据的处置权限掌握于不同网站，加大了统一管理的难度与个人隐私安全隐患。为增强用户对个人信息的管控能力，同时兼顾网站的应用需求，本文提出基于第三方个人信息服务的交互模式。该模式通过第三方个人信息服务平台存储个人信息，基于Web服务实现网站与该平台间的分布式个人信息应用，免于将个人信息交由多方存储的同时，也将个人信息的管理权限移交网络用户，实现通过第三方平台对个人信息进行统一管理。首先，基于网络隐私保护需求与个人信息应用需求对第三方个人信息服务平台基本框架进行了分析构建。然后，对第三方个人信息管理与应用服务进行了分析与实现。面向个人信息管理服务，研究构建基于约束的访问控制策略，其中加入了对数据处置方式与应用情境的约束，同时实现对个人信息应用的记录与检索。面向个人信息应用服务，构建基于Web服务的分布式个人信息应用服务模型。以基本统计分析与联合数据关联规则挖掘为例进行服务设计与实现。给出一种适用于该分布式服务情境的关联规则挖掘算法，实验证明该算法可行。最后，基于以上分析设计，对第三方个人信息服务平台及主要的个人信息服务进行仿真实验，对其有效性进行了验证与分析。
[Abstract]:In the information age, the personal information of network users has become an important capital for enterprises to enhance and maintain their competitiveness. With the value of personal information being highlighted, the problems of privacy leakage and abuse faced by network users are becoming increasingly serious. And to restrict the steady development of the Internet an important factor. The analysis of the current situation of personal information management and application in the main interactive mode of personal information in the network environment shows that: on the one hand, the storage, transmission and application of personal information by users cannot guarantee sufficient management authority; On the other hand, the personal information needed by each website is stored, and the disposal authority of data is grasped by different websites, which increases the difficulty of unified management and the hidden trouble of personal privacy. In order to enhance the user's ability to control personal information and take into account the application requirements of the website, this paper proposes an interactive model based on the third party personal information service. This model stores personal information through the third party personal information service platform, and realizes the distributed personal information application between the website and the platform based on Web service. The management authority of personal information is also transferred to network users to realize the unified management of personal information through the third party platform. Firstly, the basic framework of the third party personal information service platform is analyzed and constructed based on the requirements of network privacy protection and personal information application. Then, the third party personal information management and application services are analyzed and implemented. For the personal information management service, a constraint-based access control strategy is proposed, in which the constraints on the data handling mode and the application situation are added, and the recording and retrieval of the personal information application is realized at the same time. The distributed personal information application service model based on Web service is constructed for personal information application service. Taking basic statistical analysis and association rules mining of joint data as an example, service design and implementation are carried out. An association rule mining algorithm suitable for the distributed service situation is presented, and the experimental results show that the algorithm is feasible. Finally, based on the above analysis and design, the third party personal information service platform and the main personal information service are simulated, and its validity is verified and analyzed.
【学位授予单位】：燕山大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】