Patent Application
20140150109
The present invention relates to the field of social networks. More particularly, the invention relates to a method for protecting user privacy in social networks.
In recent years, online social networks have grown rapidly and today offer users endless possibilities for publicly expressing themselves, communicating with friends, and sharing information with people across the world. A recent survey estimated that 65% of adult internet users interface with online social network sites.
Online social networks allow users to communicate with one another for various personal and professional purposes. Those users that have been identified by another user as a person with whom there is a preference to grant access to personal information are considered “friends”. A friend is generally identified as a result of an e-mail correspondence, and is then associated with the subject over the social network. After a friendship has been established, a friend is able to access multimedia information posted in an account of the user that granted the friendship.
Due to the friendly nature of social networks such as Facebook, users tend to disclose many personal details about themselves and about their connections. These details can include date of birth, personal pictures, work place, e-mail address, high school name, relationship status, and even phone numbers. Moreover, Bosmaf et al. [“The socialbot network: when bots socialize for frame and money,” in Proceedings of the 27th Annual Computer Security Applications Conference. ACM, 2011, pp. 93-102] discovered that an average of 80% of studied Facebook users accepted friend requests from people they do not know if they share more than 11 mutual friends.
In many cases, accepting a friend request from strangers may result in exposure of a user's personal information to third parties. In addition, personal user information can be exposed to third party applications running on the social network. Another privacy concern deals with existing privacy settings which, for the majority of users, do not match security expectations. Accordingly, many users accidently or unknowingly publish private information, leaving them more exposed than they thought.
If a user's personal information is disclosed to a third malicious party, the personal information can be used to threaten the well-being of the user both online and in the real world. For example, a malicious user can use the gained personal information and send customized spam messages to the user in an attempt to lure such users onto malicious websites or blackmail them into transferring money to the attacker's account.
In order to cover their tracks, social network attackers can use fake profiles. In fact, the number of fake profiles on Facebook can number tens of millions.
However, social networks tend not to impose privacy limitations on users desiring to be friends so as to maximize the ubiquitous and independence promoting nature of the social network.
It is an object of the present invention to provide a method for improving privacy of a subject user in online social networks without compromising the feeling of ubiquitousness and independence that a friend of that subject user senses when communicating therewith over the social network.
Other objects and advantages of the invention will become apparent as the description proceeds.
The present invention is directed to a method for protecting user privacy in an online social network, comprising the steps of defining, for a given primary user of an online social network who is authorized to post multimedia information in an account of the social network, a personal profile type that characterizes a level of desired privacy and that is selected from a group of predetermined profile types; defining a personal profile type selected from the group for each of a plurality of secondary users who are interested in accessing posted multimedia information of the primary user while functioning as a friend thereof; and denying a request for friendship initiated by one of the plurality of secondary users when the profile type of the primary user and of the one of the plurality of secondary users are incompatible as defined by predetermined rules, that may be stored in the privacy setting module.
In one aspect, the method further comprises the step of transmitting a recommendation message (that may be generated by ranking a friendship level for each friend of the given primary user) to a communication device of the given primary user which is indicative that a specified secondary user is not fitting to be a friend thereof.
The recommendation message may be indicative that friendship between the given primary user and the specified secondary user should be terminated or restricted.
The given primary user may restrict friendship with the specified secondary user by depressing a button a user interface in response to receiving the recommendation message.
The method may further comprises the step of initiating a restricting event whereby access of an existing friend to multimedia information of the given primary user posted after the restricting event is restricted when the profile type of the given primary user and of the existing friend are incompatible as defined by the predetermined rules, while the existing friend continues to successfully access multimedia information of the given primary user posted prior to the restricting event.
The restricting event may be initiated by a privacy setting module installed in a communication device of the given primary user.
Each profile type of the group of predetermined profile types may be defined by no more than two parameters.
The friendship level may be ranked by scanning a friend list of the given primary user and generating a credibility score based on a number of friendship strengthening events in which both a given friend and the given primary user participated within a predetermined period of time.
The friendship strengthening events may be selected from the group consisting of:
The credibility score may be weighted whereby one friendship strengthening event type is weighted more than another type.
The friendship level of each friend of the given primary user may be ranked and compiled in a list such that those friends having a lower score are displayed at the top of the list.
The method may further comprise the step of alerting the given primary that an application installed in the account thereof presents a security risk when accessed by a friend.
In the drawings:
Due to the ubiquitous nature of prior art online social networks, a friendship may be established between any two users, subject to user approval, regardless of a lack of suitability in terms of age, interests, and social or financial standing. As a result, a newly established friend will be able to access personal information of an unsuspecting user, which when added to the information accessed from other unsuspecting users is able to abet malicious online activity including fraud, money transfers and harassment.
On the other hand, a user may be subject to peer pressure if a friend will become disqualified or otherwise removed from a friend list, indicating to others that the given user is not sociable.
The present invention is related to a method for protecting the privacy of a given user in social networks (hereinafter a “subject”) by providing three different layers of protection. The first layer allows subjects to control their profile privacy settings by online selection of most suitable profile privacy settings. The second layer notifies the subject of the number of applications installed on a personal network profile that may impose a threat to his privacy. The third layer analyzes the subject's friend list to identify which friends of the subject are suspected of maintaining a fake profile and therefore imposing a threat on the privacy of the subject. The method therefore restricts the access of those that are suspected of bearing a fake profile to the subject's personal information without removing them from the subject's friend list.
SPP system 10 comprises three components that interact synergistically. A friend analyzer module 5 is adapted to rank friends, so as to identify those friends of a given subject who are liable to pose a threat to the subject's privacy and to limit their access. Another module is a privacy setting module 7 for improving the subject's privacy settings according to the user's profile type only by pressing a button. A server 8 which is in data communication with the Internet, or any other data network with which SPP system 10 interfaces, is used to store and cache software results in its database 9 for each subject of the system. Server 8 allows friend analyzer module 5 and privacy setting module 7 to be interfaced. The analyzed software results that are stored in server 8 may be encrypted. Each module can operate independently, even without server 8.
A previously defined profile type may be modified, or alternatively, the profile type may be submitted for the first time by a subject whose profile has not yet been stored in the SPP database. A request for friendship from a potential friend is consequently granted or denied in step 34. If granted, personal profile type of the requesting friend is then analyzed.
For example, a request for friendship submitted by a 50 year old potential friend with a 10 year old subject will be denied due to the age disparity. Likewise, a change in the profile type may cause access of an existing friend to the multimedia information posted in an account of the subject to be restricted in step 36. A friend having restricted access will be able to access previously posted multimedia information without arousing suspicion that access to the subject's information has been restricted, yet will not be able to access newly posted information, or even previously posted multimedia information that has not been shared with him in the past.
In addition, the privacy setting module scans the subject account and calculates in step 38, how many applications are installed thereon and alerts the subject in step 40 which of these applications presents a security risk when accessed by a friend.
74 subjects installed the friend analyzer module and 4 subjects installed the privacy setting module. 31 of these subjects imposed a restriction on 392 friends, resulting in a median of 3 restrictions per subject and a deviation of 25:76.
The average number of friends that were common to a subject and the friends he chose to restrict was 12.82 and the average number of common tagged pictures was 0.14.
An initial test of the method proposed by the present invention showed that 3000 user from 20 countries limited more than 10000 friends.
While some embodiments of the invention have been described by way of illustration, it will be apparent that the invention can be carried out with many modifications, variations and adaptations, and with the use of numerous equivalents or alternative solutions that are within the scope of persons skilled in the art, without exceeding the scope of the claims.
