Provider-Independent Social Identity. Management for Personal and. Professional Applications

Transcription

1 Provider-Independent Social Identity Management for Personal and Professional Applications Dissertation zur Erlangung des Grades eines Doktors der Wirtschaftswissenschaften eingereicht an der Fakultät für Wirtschaftswissenschaften der Universität Regensburg vorgelegt von: Moritz Riesner Berichterstatter: Prof. Dr. Günther Pernul Prof. Dr. Guido Schryen Tag der Disputation: 11. Juli 2013

2 V Table of Contents 1 Introduction Motivation of the Dissertation Topic The Relevance of the Social Web is Increasing Privacy and Data Protection on Social Networking Sites Require Provider-Independent Social Identity Management PSIdM is Relevant in an Enterprise Environment PSIdM is a Novel and Relevant Research Topic Research Questions Research Methodology The Design Research Paradigm Application to the Dissertation Project Problem Identification and Motivation Objectives of a Solution Solution Design and Development Demonstration and Evaluation Communication Chapter Structure 10 1 Foundations and Motivation 13 2 Defining Internet Social Networking A Short History of Internet Communication Social Networking Sites (SNS) Internet Social Networking Properties for Distinguishing SNS SNS Function Set 21

3 2.2.4 SNS Architectures recliniceli Means lor SNS Access Iechnic.il Basics I Risi OAuth OpenSoci.il lacebook API I'wttter A l'i Concepts and Notions within SNS Users and User Profiles User Profile Elements The SNS User Profile as a Digital Identity Relationships Between SNS Entities Other Constructs in SNS Friend Lists, Groups and Events Messages Albums and Media Items Organizations Chapter Summary 34 Privacy and Social Identity Management in SNS Conventional Privacy and Identity Management Defining Privacy Identities and Online Identities Identity Management The Need for Social Identity Management (SIdM) Reevaluating Privacy and Identity Management applied to SNS SNS Data Increases in Quantity and Criticality SIdM on SNS becomes a Necessity User-performed SIdM is Currently Unsatisfactory Defining Social Identity Management and its Requirements High-Level SIdM Requirements Analysis Unrestricted Identity Creation and Control Multiple Representations of Self Social Circles Contact Permission Assignment Permission Targets Fine-Grained Sharing Decisions for Attribute Values Control How Contacts Shape the Users Profile Advanced Controls for Permission Assignment 54

4 VII 3.4 Chapter Summary 55 4 The Need for Provider-Independent Social Identity Management (PSIdM) Using Multiple SNS is Relevant and Desirable User Scenarios Casual End-User Scenario Enterprise Collaboration Scenario Cross-Company Collaboration Scenario Multiple SNS are Currently Used Multiple SNS Should be Used Envisioning Provider-Independent Social Identity Management SIdM Challenges when Using Multiple SNS Proposed Solution for PSIdM The Benefits of PSIdM Contribution of PISdM to SIdM Contribution of PISdM to the Use of Multiple SNS Enabler for Alternative, Privacy-friendly SNS Academic Contributions of PSIdM Research Problem Scope and Attacker Model Related Work Decentralized Approaches to Social Networking Federated Social Networking Architecture Peer-to-Peer Social Networking Architecture Access Control within SNS Social Network Management across Multiple SNS Description Languages for Social Entities Academic SNS-Spanning Management Approaches Implemented Solutions for Managing Multiple SNS Chapter Summary 79 II Proposed Solution for Provider-Independent Social Identity Management 81 5 High-Level Solution Concept for PSIdM Overview of the Proposed Solution for PSIdM The Use of Models in the Proposed Solution Global Provider-Independent Social Identity Model Elements of the Global Model Identifying Conflicts Using the Global Model Conflicts on the Attribute Level 90

5 Vili TABLE OF CONTENTS Conflicts on the Attribute Value Level Considering Overlapping SeAs Intertemporal Conflict Detection Performing SIdM within the Global Model Attribute Value Management Contact Management Persona and Audience Management Conflict Detection Management Provider-Specific Models Provider-Specific Target Models The Preliminary Provider-Dependent Target Model as a Subset of the Global Model Adapting the Preliminary Target Model to the SNS' SIdM Capabilities Deriving Actual Provider-Specific Models from the Current State in the SNS Composing the Global Model States and Transitions of the PSIdM-Solution Chapter Summary Detailed Design Considerations for the PSIdM Solution Building the Initial Global Identity Model Deriving Actual Provider-Dependent Models SNS Meta Information Structural Model for Provider-Specific Models Gathering Model Data from the SNS Composing the initial Global Model Ill Creating Global Contacts Identifying Global Audiences Creating Global Attributes and Personas Global Associations between Audiences and Personas A Refined Conception of the Global Identity Model Extensions to the Global Identity Model User View on the Global Model Main View on the Global Model Focus View for Particular SNS Context-based Information on SeAs and Personas Context-based Information on Contacts and Attribute Values PSIdM Operations 123

6 IX Indicate and Resolve Inconsistencies from the Composition Process Core SIdM Operations Maintaining Consistency of Disclosed Attribute Values Maintaining Consistency with the SNS Decomposition into Target Models Audience and Persona Applicability at the Target SNS Attribute Applicability in the Target SNS Application of the Target Models at SNS Reflecting SNS-Changes in the Global Model Chapter Summary Attribute Matching and Transformation between SNS Attribute Properties in SNS Attribute Semantics and Classification Attribute Content and Structure Control over Visibility and Access Attribute Accessibility through APIs A Structured Approach for Attribute Matching and Transformation Attribute Identification at the Target SNS Verifying Proper Representation at the Target SNS Attribute Control at the Target SNS Determining the Target Audience Control over the Attribute Value at the Target SNS Application at the Target SNS Sample Applications of the Attribute Transformation Approach Work Experience Attribute on Linkedin and Facebook Status Updates on Facebook and Twitter Design Alternatives of the Transformation Approach Centralized Static Matching Tables for SNS Attributes Semantic Reasoning based on Attribute Properties Detailed Transformation Approach Based on Semantic Reasoning Input and Output Data Input and Output Ontologies Background Ontology Reasoning Operations Chapter Summary 153

7 III Implementation and Evaluation Applicability of PSIdM to the Status Quo Provider Support Survey Support for General SIdM Constructs Support for Core SIdM Capabilities Unrestricted Identity Creation and Control Multiple Representations of Self Create and Maintain Multiple Social Circles Contact Permission Assignment SIdM Survey Analysis and Reflection API Accessibility Implications of the Available Provider Support for PSIdM Implications of the Available Provider SIdM Support Implications of the Available Provider API Accessibility Chapter Summary PSIdM Prototype Architecture and Implementation Proposed PSIdM Architecture Initial Considerations Architecture Overview Prototype Components Attribute Transformation Component SNS Connectivity Components SNS API Connectivity Component Connecting to SNS through the Web Interface PSIdM User Interface Assisted Audience Segregation Prototype Chapter Summary Evaluation of the PSIdM Proposal An Evaluation Strategy for the PSIdM Proposal Evaluation Building Blocks Suitability of the SIdM Requirements Framework Evaluation of the User Identity Models and their Constructs Model Correctness Construction Adequacy, Relevance and Clarity Systematic Design Comparability Economic Efficiency Applicability of PSIdM to Current SNS 195

8 XI Prototype Evaluation Overall Evaluation of the Proposal Fulfillment of Proposed Benefits and Related Requirements Contribution to SIdM Evaluation Evaluation of the Contribution to the Use of Multiple SNS Evaluation of PSIdM as an Enabler for Alternative SNS User Scenario Evaluation Casual End-User Scenario Enterprise Collaboration Scenario Intercompany Collaboration Scenario Open Research Issues and Future Work Evaluation Summary Conclusions 205 Bibliography 209