Social infrastructure

Last updated
Social infrastructure Social Infrastructure.png
Social infrastructure

Social infrastructure is a general term referring to a class of internet services which allow websites or mobile devices to integrate social functionality into their application user experience. Such functionality includes social login, sharing, commenting, activity feeds, online identity storage, gamification and others.

Website set of related web pages served from a single web domain

A website or web site is a collection of related network web resources, such as web pages, multimedia content, which are typically identified with a common domain name, and published on at least one web server. Notable examples are wikipedia.org, google.com, and amazon.com.

A mobile device is a computing device small enough to hold and operate in the hand. Typically, any handheld computer device will have an LCD or OLED flatscreen interface, providing a touchscreen interface with digital buttons and keyboard or physical buttons along with a physical keyboard. Many such devices can connect to the Internet and interconnect with other devices such as car entertainment systems or headsets via Wi-Fi, Bluetooth, cellular networks or near field communication (NFC). Integrated cameras, digital media players, the ability to place and receive telephone calls, video games, and Global Positioning System (GPS) capabilities are common. Power is typically provided by a lithium battery. Mobile devices may run mobile operating systems that allow third-party apps specialized for said capabilities to be installed and run.

In commerce, user experience (UX) is a person's emotions and attitudes about using a particular product, system or service. It includes the practical, experiential, affective, meaningful and valuable aspects of human–computer interaction and product ownership. Additionally, it includes a person's perceptions of system aspects such as utility, ease of use and efficiency. User experience may be subjective in nature to the degree that it is about individual perception and thought with respect to a system. User experience varies dynamically, constantly modifying over time due to changing usage circumstances and to changes to individual systems as well as to the wider usage context in which they operate. In the end, user experience is about how a user interacts with, and experiences, a product.

Contents

The technologies and services comprising social infrastructure are made available by a variety of sources including social network providers such as Facebook, Twitter, LinkedIn, and Google. Third-party providers provide services that allow applications to integrate social functionality using multiple social networks. While each provider offers a different range of social functionality to applications, all providers offer their own set of tools, plugins, SDKs and APIs to ensure their platform is accessible across as many devices as possible. Using standard programming languages (HTML, JavaScript, PHP, Java, Objective-C, etc.), applications can interface with social infrastructure from desktops, laptops, mobile phones and tablets. Indian ICT company United Telecoms Limited has implemented social infrastructure projects targeting health exchanges, tsunami warning systems, city surveillance, broadband and communication systems for rapid transportation systems.

Facebook Global online social networking service

Facebook, Inc. is an American online social media and social networking service company based in Menlo Park, California. It was founded by Mark Zuckerberg, along with fellow Harvard College students and roommates Eduardo Saverin, Andrew McCollum, Dustin Moskovitz and Chris Hughes. It is considered one of the Big Four technology companies along with Amazon, Apple, and Google.

Twitter Global micro-blogging Internet service

Twitter is a microblogging and social networking service on which users post and interact with messages known as "tweets". Tweets were originally restricted to 140 characters, but on November 7, 2017, this limit was doubled to 280 for all languages except Chinese, Japanese, and Korean. Registered users can post, like, and retweet tweets, but unregistered users can only read them. Users access Twitter through its website interface, through Short Message Service (SMS) or its mobile-device application software ("app"). Twitter, Inc. is based in San Francisco, California, and has more than 25 offices around the world.

LinkedIn Social networking website for people in professional occupations

LinkedIn is an American business and employment-oriented service that operates via websites and mobile apps. Founded on December 28, 2002, and launched on May 5, 2003, it is mainly used for professional networking, including employers posting jobs and job seekers posting their CVs. As of 2015, most of the company's revenue came from selling access to information about its members to recruiters and sales professionals. Since December 2016 it has been a wholly owned subsidiary of Microsoft. As of June 2019, LinkedIn had 630 million registered members in 200 countries.

Services and technologies

The various technologies that make up the social Infrastructure are meant to provide content owners the necessary “social network hooks” to enhance content within a website or application. [1]

Social login

Social login allows users to log into a website or application using their existing credentials on identity providers such as Facebook, Twitter, LinkedIn and Google. Social login is a key technology of the social infrastructure since many of its services require establishing a valid identity before being used.

Sharing

Allows users to share or bookmark site content and send to friends on social networks. Popular social buttons such as Facebook Like, Twitter Tweet and Google +1 are commonly added to websites which lets users share content with a single mouse click or tap from a mobile device. Sharing “plugins” from vendors offer services that let users share content to multiple social networks at once.

Comments

Gives users the ability to post their comments and have discussions about site content. Users often have the option of broadcasting their comment to their activity feeds on social networks which link friends back to the site content.

Ratings/reviews

Provides users a way to give feedback on an article, blog post, product or any other type of content across a site or application. This can range anywhere from simple ratings (3 out of 5 stars) to written reviews. Typically, users have the option of sharing this feedback on their social networks.

Activity feeds

Also known as activity streams, activity feeds display to the user what their friends and other visitors have recently been doing on a site or application. The feed is typically updated when users do anything "social" such as share, post a comment, or earn a badge.

Live chat

This allows users to chat, comment and share activity in real-time. Live chat is typically used for live events such as webcasts, web chats and webinars. Due to technical complexities of live streaming, live chat is generally offered to sites as a plugin hosted on an SaaS model.

Gamification

Gamification takes concepts often found in games (points, badges, challenges, progress bars, rankings) and applies them to non-game websites and applications to make them more appealing. Pre-built plugins and GUI elements are often made available to display and manage the information.

Consumer identity data storage

Stores a combination of standard online profile data (name, city, email, gender) with social data (friends, likes, posts) to offer a more comprehensive picture of a user's demographics and preferences. Vendors such as Facebook, Twitter and Google capture and store information with permission from the user whose identity is self-asserted. [2] Some third-party vendors aggregate social identity information across multiple vendors.

Social analytics

Pulls data from one or more social networks and identity providers to deliver metrics and reporting about user social activity such as referral traffic, demographics, shares, social logins, or key influencers on the site. These metrics provide insights concerning user preferences and site activity.

Social APIs

Along with plugins and GUI elements, social networks generally allow sites to access raw social data more directly via an API. Most social networks provide REST and JavaScript APIs as well as mobile SDKs to their data. Some third-party services offer an abstracted API which accesses social data across multiple providers in a single call.

Security

Securing the social infrastructure means offering protection against common security threats such as data tampering, replay attacks and unauthorized access. Some of the measures typically found within social infrastructure services include:

OAuth

OAuth is an underlying concept of the social infrastructure is that in exchange for a more social experience, users grant websites and applications permission-based access to the users' social data. From a security standpoint, such permission is typically granted using OAuth. OAuth is a secure authorization protocol in which social networks provide a session token to third-party applications. Using this token, applications can make API calls to social networks on the user's behalf. Along with websites, OAuth has built in support for desktop applications and mobile devices. [3]

Application secret keys

A secret key is a cryptographic random number used as a shared secret between an application and a specific social infrastructure provider. Secret keys are passed (in one form or another) between the application and vendor on every API and serve as a virtual handshake that both parties are who they say they are.

Encrypted channels

Websites can load JavaScript libraries over a secure, encrypted channel (SSL). This helps to protect the social login process from exploits like man-in-the-middle attacks or eavesdroppers who use tools to capture session cookies.

Digital signatures

Most vendors and third-party services offers ways to detect whether userIDs have been tampered with by including a digitally signed token which can be validated by the site or application. Applications verify both data integrity and authenticity by digitally validating this token.

Friendship signatures

To prevent malicious users from tampering with friend list data and pretending to be friends of a user they're not actually friends with, some providers offer "friendship signatures". These friendship signatures digitally sign specific user data which a site or application can use to verify that two users are actually friends.

See also

Related Research Articles

Single sign-on (SSO) is a property of access control of multiple related, yet independent, software systems. With this property, a user logs in with a single ID and password to gain access to any of several related systems. It is often accomplished by using the Lightweight Directory Access Protocol (LDAP) and stored LDAP databases on (directory) servers. A simple version of single sign-on can be achieved over IP networks using cookies but only if the sites share a common DNS parent domain.

The Yahoo! Messenger Protocol (YMSG) is the underlying network protocol used by the Yahoo! Messenger instant messaging client. Yahoo! Instant Messager supports many features beyond just messaging, including off-line messaging, file transfer, chat, conferencing, voice chat, webcams and avatars.

Push notifications are small messages that can reach audiences anywhere and anytime. While pop-ups appear only when audiences are on the site they belong to, push messages are independent of sites. They are associated with web browsers and apps.

OpenID open authentication standard

OpenID is an open standard and decentralized authentication protocol.

IBM Connections is a Web 2.0 enterprise social software application developed by IBM to provide online social networking tools for people associated with a company. The IBM collaboration suite, Notes / Domino, Sametime, Portal and Connections was sold to HCL technologies in December 2018.

OAuth Open standard for authorization

OAuth is an open standard for access delegation, commonly used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Facebook, Microsoft and Twitter to permit the users to share information about their accounts with third party applications or websites.

The Facebook Platform is the set of services, tools, and products provided by the social networking service Facebook for third-party developers to create their own applications and services that access data in Facebook.

Web access management (WAM) is a form of identity management that controls access to web resources, providing authentication management, policy-based authorizations, audit and reporting services (optional) and single sign-on convenience.

Google Friend Connect was a free social networking site from 2008 to 2012. Similar in practice to Facebook Platform and MySpaceID, it took a decentralised approach, allowing users to build a profile to share and update information via third-party sites. These sites acted as a host for profile sharing and social exchanges.

Bebo Social networking service

Bebo was a social networking website launched in 2005 that now describes itself as "a company that dreams up ideas for fun social apps". Grant Denholm, the man behind the Bebo relaunch, has confirmed that the site will not be returning as a social network but as a company that makes social apps. The company launched the app Blab in early 2014, which closed in 2016. In December 2014 a new version of Bebo launched as an avatar hashtag messaging app.

A distributed social network or federated social network is an Internet social networking service that is decentralized and distributed across distinct providers, such as the Fediverse. It consists of multiple social websites, where users of each site communicate with users of any of the involved sites. From a societal perspective, one may compare this concept to that of social media being a public utility.

Wadja solves the problem of conversation relevance by giving users a way to label social activity, and curate that activity into meaningful conversations. Wadja is based in Cyprus and had its BETA launch in August 2006. As of December 2009, Wadja had over 5,000,000 registered users.

The Open Collaboration Services (OCS) is an open and vendor-independent REST-based API for integration of web communities and web-based services into desktop and mobile applications. It allows the exchange of relevant data from a social network between the site and clients such as other websites and applications or widgets running locally on the user's machine or mobile device.

OpenAM open source access management platform

OpenAM is an open-source access management, entitlements and federation server platform. It was sponsored by ForgeRock until 2016. Now it is supported by Open Identity Platform Community.

An identity provider is a system entity that creates, maintains, and manages identity information for principals while providing authentication services to relying applications within a federation or distributed network.

Social login is a form of single sign-on using existing information from a social networking service such as Facebook, Twitter or Google+, to sign into a third party website instead of creating a new login account specifically for that website. It is designed to simplify logins for end users as well as provide more and more reliable demographic information to web developers.

User-Managed Access (UMA) is an OAuth-based access management protocol standard. Version 1.0 of the standard was approved by the Kantara Initiative on March 23, 2015.

ZeroPC was a commercial webtop developed by ZeroDesktop, Inc. located in San Mateo, California. ZeroPC has been called a personal cloud OS. It mimicked the look, feel and functionality of the desktop environment of a real operating system. The software was launched in September 2011 through Disrupt SF 2011 event and recently selected to the finalist of SXSW 2012 in Innovative Web Technology category. ZeroPC is web-based and required a Java applet to operate bundled productivity tool Thinkfree. The web applications found on ZeroPC are built on Java in the back end. Features included drag-and-drop functionality, cloud dashboard and personal cloud storage meta services.

Google APIs is a set of application programming interfaces (APIs) developed by Google which allow communication with Google Services and their integration to other services. Examples of these include Search, Gmail, Translate or Google Maps. Third-party apps can use these APIs to take advantage of or extend the functionality of the existing services.

OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0, an authorization framework. The standard is controlled by the OpenID Foundation.

References

Further reading