面向业务过程协同的隐私数据通信方法  

Private data communication method for business process collaboration

作　　者：陈建兵 李子谦 余阳[2] 潘茂林[2] CHEN Jianbing;LI Ziqian;YU Yang;PAN Maolin(School of Computer Science and Engineering,Sun Yat-sen University,Guangzhou 510006,China;School of Software Engineering,Sun Yat-sen University,Zhuhai 510275,China)

机构地区：[1]中山大学计算机学院,广东广州510006 [2]中山大学软件工程学院,广东珠海510275

出　　处：《智能系统学报》2025年第2期355-362,共8页CAAI Transactions on Intelligent Systems

基　　金：国家重点研发计划项目(2020YFB1707603);NSFC-广东联合基金项目(U20A6003);国家自然科学基金项目(61972427);广东省科技计划项目(2020A0505100030).

摘　　要：将区块链应用于业务过程协同可以增强业务过程协同的可信性,但是现有的数据通信方式存在影响数据可靠性和区块链可追溯性、泄露数据隐私等问题,无法满足组织间正常业务过程协同的需求。为解决上述问题,提出了一种面向业务过程协同的隐私数据通信方法,拓展了Wf-XML 2.0协议,并基于星际文件系统(inter planetary file system,IPFS)和非对称加密技术设计了代理组件Broker,将数据通信分为保存数据、请求数据和响应数据3个步骤执行来保障业务数据的隐私。通过Dolev-Yao攻击者模型、过程协同实际案例和实验对方法进行分析,验证了该方法的安全性、合理性和可行性。The application of blockchain to business process collaboration enhances its credibility.However,existing data communication methods encounter issues such as compromising data reliability,blockchain traceability,and data privacy.As a result,they fail to meet the needs of standard business process collaboration between organizations.We propose a private data communication method for business process collaboration to solve these problems.This method extends the Wf-XML2.0 protocol and designs a Broker component based on the interplanetary file system and asymmetric encryption technology.Data communication is divided into three steps to ensure the privacy of business data:saving,requesting,and responding.We use the Dolev–Yao attacker model,practical cases of process collaboration,and experiments for analysis to verify the security.

关 键 词：区块链 过程协同 Wf-XML 2.0 非对称加密 数据隐私 互操作协议 通信方法 Dolev-Yao 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]