Data ownership and interoperability for a decentralized social semantic web

• Main Author: SAMBRA, Andrei Vlad
• Language: ENG
• Published: Institut National des Télécommunications 2013
• Subjects: [INFO:INFO_OH] Computer Science/Other; [INFO:INFO_OH] Informatique/Autre; [SHS:ECO] Humanities and Social Sciences/Economies and finances; [SHS:ECO] Sciences de l'Homme et Société/Economies et finances; Decentralized identity; Decentralized authentification; Data privacy; Access control; WebID; WebID-TLS; Semantic web
• Online Access: http://tel.archives-ouvertes.fr/tel-00917965; http://tel.archives-ouvertes.fr/docs/00/91/79/65/PDF/SAMBRA_Andrei-2.pdf

Ensuring personal data ownership and interoperability for decentralized social Web applications is currently a debated topic, especially when taking into consideration the aspects of privacy and access control. Since the user's data are such an important asset of the current business models for most social Websites, companies have no incentive to share data among each other or to offer users real ownership of their own data in terms of control and transparency of data usage. We have concluded therefore that it is important to improve the social Web in such a way that it allows for viable business models while still being able to provide increased data ownership and data interoperability compared to the current situation. To this regard, we have focused our research on three different topics: identity, authentication and access control. First, we tackle the subject of decentralized identity by proposing a new Web standard called "Web Identity and Discovery" (WebID), which offers a simple and universal identification mechanism that is distributed and openly extensible. Next, we move to the topic of authentication where we propose WebID-TLS, a decentralized authentication protocol that enables secure, efficient and user friendly authentication on the Web by allowing people to login using client certificates and without relying on Certification Authorities. We also extend the WebID-TLS protocol, offering delegated authentication and access delegation. Finally we present our last contribution, the Social Access Control Service, which serves to protect the privacy of Linked Data resources generated by users (e.g. pro le data, wall posts, conversations, etc.) by applying two social metrics: the "social proximity distance" and "social contexts"