Abstract In a digital library, an increasingly important problem is how to prevent the exposure of user privacy in an untrusted network. This study aims to design an effective approach for the protection of user privacy in a digital library, by consulting the basic ideas of encryption and anonymization. In our proposed approach, any privacy data, which can identify user’s real identity, should be encrypted first before being submitted to the library server, to achieve anonymization of user identity. Then, to solve the problem of querying encrypted privacy data, additional feature data are constructed for the encrypted data, such that much of the query processing can be completed at the server-side, without decrypting the data, thereby improving the efficiency of each kind of user query operation. Both theoretical analysis and experimental evaluation demonstrate the effectiveness of the approach, which can improve the security of users’ data privacy and behavior privacy on the untrusted server-side, without compromising the availability (i. e. accuracy, efficiency, and usability) of digital library services. This paper provides a valuable study attempt at the protection of digital library users’ privacy, which has a positive influence on the development of a privacy-preserving library in an untrusted network environment.

中文翻译：

---

保护数字图书馆用户隐私的有效方法

摘要在数字图书馆中，一个日益重要的问题是如何防止在不受信任的网络中暴露用户隐私。这项研究旨在通过参考加密和匿名化的基本思想，设计一种有效的方法来保护数字图书馆中的用户隐私。在我们提出的方法中，任何可以识别用户真实身份的隐私数据都应先加密，然后再提交给图书馆服务器，以实现用户身份的匿名化。然后，为了解决查询加密的隐私数据的问题，为加密的数据构造了附加的特征数据，使得可以在服务器端完成很多查询处理，而无需解密数据，从而提高了各种效率。用户查询操作。理论分析和实验评估都证明了该方法的有效性，它可以提高不受信任的服务器端用户数据隐私和行为隐私的安全性，而不会损害数字图书馆服务的可用性（即准确性，效率和可用性）。 。本文为保护数字图书馆用户的隐私提供了有价值的研究尝试，这对在不受信任的网络环境中保护隐私的图书馆的发展具有积极的影响。