移动互联网的用户隐私保护研究

项目名称： 移动互联网的用户隐私保护研究

项目编号： No.61772194

项目类型： 面上项目

立项/批准年度： 2018

项目学科： 自动化技术、计算机技术

项目作者： 廖俊国

作者单位： 湖南科技大学

项目金额： 16万元

中文摘要： 移动互联网已进入广泛应用阶段，而由移动服务的开放性导致的隐私泄露等安全风险也日益突出。本项目将对移动互联网的用户隐私保护问题展开研究，主要内容包括：（1）用户信息隐私保护研究。通过对移动互联网隐私泄露攻击路径的回溯分析提取信息敏感性要素，合理描述各要素之间的关联关系，建立信息敏感性评价标准及度量模型；定义映射函数，按敏感度对信息进行分级；设计具有多级安全强度的保密机制及算法。（2）用户身份隐私保护研究。针对匿名性、可追踪性、高效性和移动性的需求，基于伪名、盲签名、聚合签名等技术，利用椭圆曲线密码设计具有可追踪性的轻量级匿名漫游认证协议。（3）用户位置隐私保护研究。基于匿名和位置泛化技术设计移动互联网的用户位置隐私保护方案，达到安全强度、位置精度和系统性能之间的良好平衡。本项目的研究为移动互联网用户提供多方位的隐私保护方案，促进移动互联网应用的健康发展。

中文关键词： 移动互联网；隐私保护；分级保密；匿名认证；位置隐私

英文摘要： Mobile Internet has been applied in many fields. Owing to the openness of mobile services, information security becomes more and more important. It is a key problem for Mobile Internet to ensure user privacy preservation. We will research user's privacy preservation for Mobile Internet. The research issues are as following: (1) Research on user's information privacy preservation. Through analysis of privacy attack path of Mobile Internet, the elements of information sensitivity are extracted, their relationship is described with weight vector graph, information sensitivity evaluation model is built, users can calculate the value of information sensitivity through the personalized parameters. Through the mapping function, different information is mapped to a different security level. Based on encryption technology, confidence algorithm with multi-security-level will be design. According to the value of information sensitivity, the user's personal information can be protected with multi-security-level. (2) Research on user's identity privacy preservation. Based on pseudo name technology, blind signature technology and aggregate signature technology, a lightweight anonymous roaming authentication protocol will be designed, which uses elliptic curve cryptosystems and can trace the attacker. The requirements, such as anonymity, traceability, efficiency and mobility, can be met in some specific applications. (3) Research on user's location privacy preservation. The relation among security strength, position accuracy and system performance will be research. Based on anonymity and location generalization technique, a user's location privacy protection scheme will be designed, which can achieve good balance among security strength, position accuracy and system performance. The program's research results provide an approach to protect user's private information in Mobile Internet. When users access services, their privacy wouldn't disclose. The development and application of Mobile Internet will be promoted.

英文关键词： Mobile Internet;privacy preservation;hierarchical confidence;anonymous authentication;location privacy