面向行为的Web服务组合隐私策略描述研究  

Behavior-Oriented Privacy Policy Description for Web Services Composition

作　　者：陆嘉俊[1] 黄志球[1] 王进[1] 沈国华[1] 柯昌博[1] 

机构地区：[1]南京航空航天大学计算机科学与技术学院,南京210016

出　　处：《计算机科学与探索》2013年第7期592-601,共10页Journal of Frontiers of Computer Science and Technology

基　　金：国家自然科学基金 Nos.61100034;61170043;中国博士后科学基金 No.20110491411;江苏省博士后科研资助计划项目 No.1101092C~~

摘　　要：验证Web服务组合是否满足用户隐私需求,是目前Web服务组合中隐私保护的研究热点,但现有研究很少关注带有行为特征的隐私需求。提出了一种限制隐私数据访问与服务调用时序关系的面向行为隐私需求的描述方法,为其形式化验证奠定了基础。给出了带有目标和义务等特性的面向行为的隐私策略模型,并使用六元组进行表示。给出了该模型的XML Schema定义,在此基础上实现了自然语言描述的隐私需求到XML表示的隐私策略的转换。通过案例分析说明了该方法的有效性。Verifying whether Web services composition satisfies with privacy requirement is a hot spot for privacy protection currently. However, little research focuses on behavioral privacy requirement. This paper proposes an approach to describing behavior-oriented privacy requirement that limits temporal relationship betwween private data access and service invocation in order to lay the foundation for formal verification of the requirement. Firstly, this paper introduces the behavior-oriented privacy policy model taking into account features like purpose and obliga- tions, which is expressed with six-tuple. Then, it presents the definition with extensible markup language （XML） schema, corresponding with the model, and achieves the transformation of privacy policies from the natural lan- guage to XML document. Finally, the effectiveness of the proposed method is illustrated through a case.

关 键 词：WEB服务组合 面向行为的隐私策略 可扩展标记语言(XML) 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]