An Extended Control Framework for Privacy-Preserving Photo Sharing across Different Social Networks

Photo sharing across different social networks has become one of the most popular social activities in our daily life. However, users lost the control totally once they upload their photos to the current social network. In this paper, we propose the design, implementation and evaluation of PrivacyJPEG, a framework to preserve users’ privacy on their uploaded photos, especially when these photos are forwarded to other social networks. PrivacyJPEG acts as a third-party plugin to existing photo sharing-supported social networks, it enables: 1) to encrypt several privacy areas of photos and bind the access control polices before users uploading their photos, 2) each user’s privacy policy could restrain the following users on a dissemination chain, 3) any privacy areas on the photos could be hidden away from unwanted viewers even across different social networks. Besides, PrivacyJPEG presents a carefully designed embedding method, which binds the policies to the uploaded JPEG file without disturbing their displays. We implement a prototype of PrivacyJPEG, design and perform a set of useful real life experiments. The evaluation results indicate the effectiveness and efficiency of PrivacyJPEG.

[1]  Jinjun Chen,et al.  Cyberspace-Oriented Access Control: A Cyberspace Characteristics-Based Model and its Policies , 2019, IEEE Internet of Things Journal.

[2]  Muthucumaru Maheswaran,et al.  Privacy aware image template matching in clouds using ambient data , 2013, The Journal of Supercomputing.

[3]  Fenghua Li,et al.  SRIM Scheme: An Impression-Management Scheme for Privacy-Aware Photo-Sharing Users , 2018 .

[4]  Bin Liu,et al.  On Privacy Preserving Partial Image Sharing , 2015, 2015 IEEE 35th International Conference on Distributed Computing Systems.

[5]  Siani Pearson,et al.  Enhancing Accountability in the Cloud via Sticky Policies , 2011, STA Workshops.

[6]  Bin Liu,et al.  PUPPIES: Transformation-Supported Personalized Privacy Preserving Partial Image Sharing , 2016, 2016 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN).

[7]  Jan-Michael Frahm,et al.  Virtual U: Defeating Face Liveness Detection by Building Virtual Models from Your Public Photos , 2016, USENIX Security Symposium.

[8]  João Leitão,et al.  Privacy-Preserving Content-Based Image Retrieval in the Cloud , 2014, 2015 IEEE 34th Symposium on Reliable Distributed Systems (SRDS).

[9]  Sotiris Ioannidis,et al.  Face/Off: Preventing Privacy Leakage From Photos in Social Networks , 2015, CCS.

[10]  Yunhao Liu,et al.  POP: Privacy-Preserving Outsourced Photo Sharing and Searching for Mobile Devices , 2015, 2015 IEEE 35th International Conference on Distributed Computing Systems.

[11]  Yuguang Fang,et al.  My Privacy My Decision: Control of Photo Sharing on Online Social Networks , 2017, IEEE Transactions on Dependable and Secure Computing.

[12]  Weiwei Sun,et al.  Robust Privacy-Preserving Image Sharing over Online Social Networks (OSNs) , 2018, ACM Trans. Multim. Comput. Commun. Appl..

[13]  William J. Buchanan,et al.  Sticky policies approach within cloud computing , 2017, Comput. Secur..

[14]  Ramesh Govindan,et al.  P3: Toward Privacy-Preserving Photo Sharing , 2013, NSDI.

[15]  M. Premkumar,et al.  Resolving Multi-party Privacy Conflicts in Social Media , 2018 .

[16]  Gail-Joon Ahn,et al.  Towards PII-based Multiparty Access Control for Photo Sharing in Online Social Networks , 2017, SACMAT.

[17]  Touradj Ebrahimi,et al.  Secure JPEG scrambling enabling privacy in photo sharing , 2015, 2015 11th IEEE International Conference and Workshops on Automatic Face and Gesture Recognition (FG).

[18]  Gail-Joon Ahn,et al.  Multiparty Access Control for Online Social Networks: Model and Mechanisms , 2013, IEEE Transactions on Knowledge and Data Engineering.

[19]  Jose M. Such,et al.  Sharing Policies in Multiuser Privacy Scenarios: Incorporating Context, Preferences, and Arguments in Decision Making , 2016 .

[20]  Yunhao Liu,et al.  Kaleido: You Can Watch It But Cannot Record It , 2015, MobiCom.

[21]  Michael Waidner,et al.  Platform for Enterprise Privacy Practices: Privacy-Enabled Management of Customer Data , 2002, Privacy Enhancing Technologies.

[22]  Cong Wang,et al.  Enabling Privacy-Preserving Image-Centric Social Discovery , 2014, 2014 IEEE 34th International Conference on Distributed Computing Systems.