González Manzano, LorenaSlaymaker, MarkFuentes García-Romero de Tejada, José María deVayenas, Dimitris2018-05-302018-05-302018-01González-Manzano L., Slaymaker M., de Fuentes J.M., Vayenas D. (2018) SoNeUCONABCPro: An Access Control Model for Social Networks with Translucent User Provenance. In: Lin X., Ghorbani A., Ren K., Zhu S., Zhang A. (eds) Security and Privacy in Communication Networks. SecureComm 2017. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 239. Springer, Cham978-3-319-78815-9https://hdl.handle.net/10016/26928Proceedings of: SecureComm 2017 International Workshops, ATCS and SePrIoT, Niagara Falls, ON, Canada, October 22–25, 2017Web-Based Social Networks (WBSNs) are used by millions of people worldwide. While WBSNs provide many benefits, privacy preservation is a concern. The management of access control can help to assure data is accessed by authorized users. However, it is critical to provide sufficient flexibility so that a rich set of conditions may be imposed by users. In this paper we coin the term user provenance to refer to tracing users actions to supplement the authorisation decision when users request access. For example restricting access to a particular photograph to those which have “liked” the owners profile. However, such a tracing of actions has the potential to impact the privacy of users requesting access. To mitigate this potential privacy loss the concept of translucency is applied. This paper extends SoNeUCONABC model and presents SoNeUCONABCPro, an access control model which includes translucent user provenance. Entities and access control policies along with their enforcement procedure are formally defined. The evaluation demonstrates that the system satisfies the imposed goals and supports the feasibility of this model in different scenarios.application/pdfeng© ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2018Social networksAccess controlUser provenanceTranslucencyconference paperInformáticahttps://doi.org/10.1007/978-3-319-78816-6_17open access234252Security and Privacy in Communication Networks. SecureComm 2017.239CC/0000027396