• Corpus ID: 18633702

A Security API for Distributed Social Networks

@inproceedings{Backes2011ASA,
  title={A Security API for Distributed Social Networks},
  author={Michael Backes and Matteo Maffei and Kim Pecina},
  booktitle={Network and Distributed System Security Symposium},
  year={2011}
}

• M. Backes, Matteo Maffei, Kim Pecina
• Published in
  Network and Distributed…
  6 February 2011
• Computer Science, Mathematics

We present a cryptographic framework to achieve access control, privacy of social relations, secrecy of resources, and anonymity of users in social networks. We illustrate our technique on a core API for social networking, which includes methods for establishing social relations and for sharing resources. The cryptographic protocols implementing these methods use pseudonyms to hide user identities, signatures on these pseudonyms to establish social relations, and zero-knowledge proofs of knowledge of such signatures to demonstrate the existence of social relations without sacrificing user anonymity. As we do not put any constraints on the underlying social network, our framework is generally applicable and, in particular, constitutes an ideal plug-in for decentralized social networks. We analyzed the security of our protocols by developing formal definitions of the aforementioned security properties and by verifying them using ProVerif, an automated theorem prover for cryptographic protocols. Finally, we built a prototypical implementation and conducted an experimental evaluation to demonstrate the efficiency and the scalability of our framework.