Research On Risk Factors And Risk Assessment Methods Of User Privacy Disclosure In Mobile Commerce

With the rapid development of mobile Internet and mobile communication technology,mobile commerce has gradually become the main form of online shopping,and occupies a huge mass market.It offers a variety of precise services to users,including mobile shopping,mobile payment,mobile travel,and mobile financial management.The precise and personalized services provided by the mobile commerce platforms are based on users' private information to locate the user's personalized needs.In this way,mobile commerce platforms and users can realize a win-win situation.However,while mobile commerce users enjoy precise and personalized services,they also face severe privacy security threats.Their private information is often exposed to the risks of being leaked,abused,and stolen during the acquisition,use,transmission and storage by mobile commerce platforms.A growing number of users are concerned about the safety of their personal private information,which directly affects their willingness to disclose private information,and has become a key factor restricting the further development of mobile commerce.This issue also arouses wide concern from the academia and industrial circles.Thus,this dissertation focuses on the studies of risks of mobile commerce users' private information disclosure and risk assessment to solve the following four problems:(1)Mobile commerce users face both benefits and risks when disclosing private information.What is the behavior mechanism and risk factors of user private information disclosure?(2)What specific risks are faced by mobile commerce users when disclosing private information? How to build a set of risk assessment index system?(3)How do mobile commerce users make quantitative and accurate assessments of various mobile commerce platforms?(4)How to improve the risk environment of mobile commerce platforms,and how to improve the government,industry and other regulatory functions?To this end,this dissertation introduces privacy computing theory to build a behavior mechanism model for mobile commerce users' private information disclosure,and empirically analyzes the internal behavior mechanism and risks of the private information disclosure.Based on the risk management theory and research idea of “risk identification,risk assessment method and risk control”,this dissertation proposes effective risk measurement and assessment methods to help users choose mobile commerce applications with “acceptable” or “controllable” risks.In addition,suggestions are put forward to improve the mobile commerce risk environment,so as to ensure that mobile commerce is developed healthily while users enjoy precise and personalized services with no risk of private information leakage.First of all,the following researches are carried out by the literature research method based on the research issues:(i)sorting out and summarizing the current domestic and foreign researches related to the behavior and risks of mobile network users' private information disclosure,and privacy risk assessment methods,exploring the perspective of how this dissertation studies the behavior mechanism,risk identification and risk assessment methods of private information disclosure;(ii)introducing the connotation and characteristics of mobile commerce,and its differences with the traditional e-commerce,explaining the definition and classification of private information,and defining the concept of mobile commerce users' private information and their disclosure behavior.(iii)sorting out and introducing the privacy computing theory,risk management theory,information security risk assessment standards and other theories closely related to the researches of this dissertation,which lays theoretical foundation for the building of a behavior mechanism model for mobile commerce users' private information disclosure and the identification and assessment of private information disclosure risks.Secondly,based on the privacy computing theory,risk management theory,and information security risk assessment standards,a theoretical model and theoretical assumptions about the behavior mechanism for mobile commerce users' private information disclosure are put forward in this dissertation.Sample data are collected through questionnaires,and the reliability and validity of the data have been tested.The theoretical assumptions are empirically tested and verified using a structural equation model,and are empirically analyzed around the risk factors from the perspective of risk perception.The questionnaires are distributed in dissertation and through the “questionnaire star” platform,and a total of 512 valid questionnaires have been collected.According to the data analysis results:(i)the risks of mobile commerce platform technology,platform environment,platform operation management,mobile terminal and user vulnerability positively affects mobile commerce users' perception of the risks of private information disclosure;(ii)mobile commerce users' perception of the risk of private information disclosure negatively affects their willingness to disclose private information,and their perception of the benefits of private information disclosure positively affects their willingness to disclose private information;(iii)the willingness of mobile commerce users to disclose private information positively affects their private information disclosure behavior.Thirdly,based on the risk management theories and information security risk assessment standards,a risk assessment system is built from five dimensions: risks of technology,mobile commerce platform environment,mobile commerce platform operation management,mobile terminal and user vulnerability.Besides,based on the current researches at home and abroad on the risk assessment methods of mobile network users' private information disclosure,a new risk measurement and assessment method combining qualitative and quantitative measures is proposed in this dissertation: risk assessment method of mobile commerce users' private information disclosure based on information entropy and Markov.In addition,a risk assessment method based on classical assessment methods is also set forth in the dissertation for comparative analysis of the methods around the theoretical basis,design ideas and calculation steps of the assessment methods.Based on the practical applications of mobile commerce,representative application cases are sorted out to test the proposed risk assessment methods.Sample data are collected through questionnaires or expert scores to empirically analyze the risk assessment method based on fuzzy comprehensive evaluation method and BP neural network,and the risk assessment method based on the information entropy and Markov.Subsequently,the results of the two risk assessment methods are compared and analyzed,to further test the validity and effectiveness of the new method proposed here.Finally,based on the empirical analysis results of risk assessment methods,the characteristics and current situation of the risks in mobile commerce users' private information disclosure are sorted out and summarized,and management strategies are proposed focusing on the risk indicators.In addition,specific countermeasures are also put forward from the perspective of platform technology,platform environment,platform operation management,mobile terminal and the users,as well as the government,industry and other regulatory entities.Based on the summary of the content and conclusions of this dissertation,the innovations and limitations of the researches are sorted out,and the direction of future research in this field is proposed.Based on the above researches and conclusions,the main contributions and innovations of this dissertation are as follows:(1)A behavior mechanism model for mobile commerce users' private information disclosure is built based on the privacy computing theory,risk management theory,and information security risk assessment standards.The structural equation model is used to verify the theoretical model and relational hypothesis proposed,and studies have been carried out to further explore the internal function path and influencing factors of mobile commerce users' private information disclosure behavior.The decision-making process of mobile commerce users' private information disclosure and risk factors perceived by users are also discussed from the perspective of user perception,which has certain theoretical significance for building a theory system of mobile commerce users' private information disclosure behavior.(2)The risk assessment system and risk attribute model of mobile commerce users' private information disclosure are built based on the domestic and foreign research literature and the empirical analysis results of the internal mechanism of mobile commerce users' private information disclosure behavior.The reliability and validity of the risk attribute model has been tested.Moreover,the risk factors of mobile commerce users' private information disclosure are comprehensively described from different aspects such as the risks of platform technology,platform environment,platform operation management,mobile terminal and user vulnerability,thereby expanding the risk attribute model from a new perspective.(3)A new risk measurement and assessment method combining qualitative and quantitative measures is proposed in this dissertation.The information entropy in information theory and the Markov chain in mathematical statistics are introduced into the risk assessment of mobile commerce users' private information disclosure,thus putting forward a new assessment method from the perspective of interdisciplinary research: risk assessment method of mobile commerce users' private information disclosure based on information entropy and Markov.The information entropy is used to measure the risks of users' private information disclosure,and a more realistic and complex risk environment is described through Markov matrix to calculate target risk assessment values and the risk entropy of various risk factors.At the same time,case analysis is conducted in this dissertation to compare and analyze the proposed new method with the risk assessment method based on the classic fuzzy comprehensive evaluation method and BP neural network,which further tests the validity and effectiveness of the new method.The risks of mobile commerce users' private information disclosure are studied from the qualitative and quantitative perspectives,to provide objective and accurate assessment results of private information disclosure risks.(4)A targeted risk management strategy of mobile commerce users' private information disclosure is put forward based on the risk assessment results of mobile commerce users' private information disclosure and the characteristics and current situation of the risks.In addition,specific privacy protection measures are proposed from the perspectives of platform technology,platform environment,platform operation management,mobile terminal and the users,as well as the government,industry and other regulatory entities,which have certain practical significance for the protection of mobile commerce users' private information,and provide suggestions for the further improvement of the mobile commerce privacy risk environment.