一种隐私暴露风险控制的服务演化方法

doi:10.3969/j.issn.1006-2475.2014.10.018

计算机与现代化

一种隐私暴露风险控制的服务演化方法

南京航空航天大学计算机科学与技术学院，江苏南京210016

收稿日期:2014-07-14 出版日期:2014-11-03 发布日期:2014-11-05
作者简介:刘博(1990-),男(土家族),江苏南京人,南京航空航天大学计算机科学与技术学院硕士研究生,研究方向:Web隐私和Web服务；黄志球(1965-),男,教授,研究方向:软件工程,软件度量；王珊珊(1963-),女,副教授,研究方向:软件工程,软件度量,程序设计语言。
基金资助:
国家自然科学基金资助项目(61272083)；中央高校基本科研业务费专项基金资助项目(56XAA12022)

A Method of Service Evolution for Controlling Risk of Privacy Exposure

College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 210016, China

Received:2014-07-14 Online:2014-11-03 Published:2014-11-05

摘要/Abstract

摘要： 在Web服务组合中，用户隐私保护问题被广泛关注。当服务组合中有一个或多个成员服务对用户隐私数据的需求超出用户愿意给予的范围时，Web服务组合需要能够进行调整，以保证隐私数据的暴露符合用户需求。本文基于服务演化的理论，提出一种基于用户隐私需求的服务演化方法，其核心内容在于通过控制隐私数据的引用范围来达到降低隐私暴露风险的目的。最后通过一个旅游代理的实例分析，验证了本文提出的演化方法的可行性。


关键词: Web服务组合, 服务演化, 隐私保护, 演化约束, 变化策略

Abstract: In the Web services composition, users privacy protection has been received widespread attention. When the requirement for users privacy data by one or more member services in the service composition is beyond the range of users willing to give, Web services composition need to be adjusted to ensure that the expose of privacy data is meeting the demand of the users. In this paper, we propose a new method of service evolution, which is based on the users privacy requirements. The key to this method is by controlling the scope of privacy datas references to achieve the purpose of reducing the risk of privacy exposure. Finally, through a travel agency case study, the feasibility of the proposed evolutionary approach is verified.


Key words: Web service composition, service evolution, privacy protection, evolution constraints, change strategy

中图分类号:

TP309

刘博,黄志球,王珊珊. 一种隐私暴露风险控制的服务演化方法[J]. 计算机与现代化, doi: 10.3969/j.issn.1006-2475.2014.10.018.

LIU Bo, HUANG Zhi-qiu, WANG Shan-shan. A Method of Service Evolution for Controlling Risk of Privacy Exposure[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2014.10.018.

参考文献

［1］ Dustdar S, Schreiner W. A survey on Web services composition［J］. International Journal of Web and Grid Services, 2005,1(1):1-30.
［2］ Bansal G, Zahedi F M, Gefen D. The impact of personal dispositions on information sensitivity, privacy concern and trust in disclosing health information online［J］. Decision Support Systems, 2010,49(2):138-150.
［3］ Singh M P. Privacy for telecom services［J］. IEEE Internet Computing, 2002,6(1):4-5.
［4］ Goldberg I, Wagner D, Brewer E. Privacy-enhancing technologies for the Internet［C］// Proceedings of the 42nd IEEE International Computer Conference. 1997:103.
［5］ Xu Wei, Venkatakrishnan V N, Sekar R, et al. A framework for building privacy-conscious composite Web services［C］// Proceedings of the IEEE International Conference on Web Services. 2006:655-662.
［6］徐万江. 一种保护用户隐私的Web服务组合框架［J］. 计算机与现代化, 2012(3):89-92.
［7］ Li Yinhua, Paik H Y, Benatallah B. Formal consistency verification between BPEL process and privacy policy［C］// Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services. 2006:212-223.
［8］刘林源,李清,祝义,等. Web服务组合中的隐私需求规约与验证［J］. 解放军理工大学学报(自然科学版), 2012,13(1):27-33.
［9］ Liu Linyuan, Zhu Haibin, Huang Zhiqiu. Analysis of the minimal privacy disclosure for Web services collaborations with role mechanisms［J］. Expert Systems with Applications, 2011,38(4):4540-4549.
［10］Liu Linyuan, Zhu Haibin, Huang Zhiqiu, et al. Minimal privacy authorization in Web services collaboration［J］. Computer Standards & Interfaces, 2011,33(3):332-343.
［11］Barth A, Mitchell J, Datta A, et al. Privacy and Utility in Business Processes［C］// Proceedings of the 20th IEEE Computer Security Foundations Symposium. 2007:279-294.
［12］赵亮,黄志球,刘林源. Web服务组装中的隐私暴露分析方法［J］. 计算机科学与探索, 2012,6(4):319-326.
［13］Papazoglou M P. The challenges of service evolution［C］// Proceedings of the 20th International Conference on Advanced Information Systems Engineering. 2008:1-15.
［14］Liu Xumin, Bouguettaya A, Wu J, et al. Ev-lcs: A system for the evolution of long-term composed services［J］. IEEE Transactions on Services Computing, 2013,6(1):102-115.
［15］Madhavji N H. The prism model of changes［C］// Proceedings of the 13th International Conference on Software Engineering. 1991:166-177.
［16］van der Aalst W M P, Basten T. Inheritance of workflows: An approach to tackling problems related to change［J］. Theoretical Computer Science, 2002,270(1-2):125-203.

[1]	查凯金, 王志波, 何月顺, 徐洪珍. 区块链安全保护研究综述[J]. 计算机与现代化, 2023, 0(06): 110-117.
[2]	冯立刚, 朱友文, . 保护位置隐私的效用优化本地差分隐私机制[J]. 计算机与现代化, 2022, 0(09): 99-105.
[3]	张天喜, 王利朋, 周春天, 杨艳艳, 李晓冲. 物联网中基于区块链的密态内容审计方案[J]. 计算机与现代化, 2022, 0(03): 30-36.
[4]	左鹏,贺智谋,袁梦,张海阔,杨卫平. 基于加密传输的标识解析模型研究[J]. 计算机与现代化, 2020, 0(04): 46-.
[5]	尚靖伟1,2，姜茸1,2，胡潇涵1,2，施明月1,2. 医疗大数据及隐私泄露[J]. 计算机与现代化, 2019, 0(07): 111-.
[6]	朱世照，薛善良. WSN中一种基于可控能耗的源位置隐私保护协议[J]. 计算机与现代化, 2017, 0(7): 95-100+123.
[7]	陈杨，于守健. 基于差分隐私的决策树发布技术研究[J]. 计算机与现代化, 2017, 0(3): 59-.
[8]	朱世照，薛善良. 一种WSN中多幻影节点源位置隐私保护协议[J]. 计算机与现代化, 2017, 0(2): 98-104+108.
[9]	何玉辉. 基于随机博弈的机会网络隐私保护机制[J]. 计算机与现代化, 2016, 0(9): 30-34.
[10]	戴颖玲，陈俊杰，周德华，陈杰朗. 一种改进的云存储数据完整性验证方案[J]. 计算机与现代化, 2016, 0(10): 92-95.
[11]	李沛谕，张治学. 基于可扩展加密的传感器网络数据隐私保护研究[J]. 计算机与现代化, 2015, 0(7): 34-.
[12]	张兴兰;于金英. 一种支持数据修改的隐私保护策略[J]. 计算机与现代化, 2013, 1(8): 175-178,.
[13]	张兴兰;刘乐伟. 面向多敏感属性的隐私保护方法[J]. 计算机与现代化, 2013, 1(8): 168-171,.
[14]	许帅. 基于分布式信息流控制的MapReduce隐私安全加强方案研究[J]. 计算机与现代化, 2012, 1(03): 93-97.
[15]	饶兰香. 基于隐私保护的数据挖掘研究[J]. 计算机与现代化, 2011, 12(12): 109-111.

一种隐私暴露风险控制的服务演化方法

A Method of Service Evolution for Controlling Risk of Privacy Exposure

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价