基于密钥协商和身份匿名技术的社交发现隐私保护方案

In order to solve the problems that servers and users may collect and query user’s attribute information, malicious attackers may launch man-in-the-middle attack, replay attack and forgery identity attack when attributes were matched by users in mobile social networks, a privacy protection scheme for social discovery based on key agreement and identity anonymity technology was proposed. In the scheme, the respective attribute hash sets of the query user and the response user whose identity were authenticated by the system were generated by irreversible hash functions and random numbers randomly selected by the query user. The server was responsible for calculating attribute matching values between all responding users and querying users, and recommending friends to querying users according to the size of the values. The Private keys used in the secure communication in the process of query matching and subsequent establishment of friendship by legal users of the system, were generated by secretly transferring public parameters through the server based on Diffie-Hellman key agreement technology，and confidential to the server. The security analysis demonstrated that the scheme could prevent the leakage of user’s privacy information and ensure the anonymity of user’s identity. At the same time, a simulation experiment was designed on MyEclipse platform based on the jPBC cryptographic algorithm library. Experimental results showed that compared with the similar schemes, the proposed scheme is more effective in reducing user’s computation and communication burden.