摘要：
Many service composition scenarios involve the sharing of user's privacy data.Due to the transparency of composition's business logic and lack of privacy protocol between user and member service,how to prevent the leakage of user privacy information has become a hot research topic in the field of service-oriented computing.A static analysis method of secure privacy information flow for service composition is proposed in this article according to the characteristics of privacy protection.Firstly,a security model is developed to formalize the security policy of privacy information flow on three aspects:service reputation,retention and purpose.Then,the composition is modeled with privacy workflow net,which gives support to the analysis of privacy information flow,and the detection of privacy information leakage is performed by analyzing execution paths of composition.Finally,a case study is included to demonstrate the effectiveness of the proposed method,and the performance experiment is also presented.Compared with the existing relevant works,the security model proposed reflects the characteristics of privacy protection,and the analysis method is able to deal with issues caused by the aggregation of privacy data items.Therefore,the application of this method can prevent the information leakage more efficiently.%用户为使用服务组合提供的功能,需要提供必要的个人隐私数据.由于组合的业务逻辑对用户是透明的,且用户与成员服务之间缺乏隐私数据使用的相关协议,如何保证组合执行过程中不发生用户隐私信息的非法泄露,成为当前服务计算领域的研究热点之一.针对隐私保护特征,提出一种服务组合安全隐私信息流静态分析方法.首先,从服务信誉度、隐私数据使用目的及保留期限这3个维度提出一种面向服务组合的隐私信息流安全模型;其次,采用支持隐私信息流分析的隐私工作流网(privacy workflow net,简称PWF-net)构建服务组合模型,并通过静态分析算法分析组合执行路径,检测组合的执行是否会发生用户隐私信息的非法泄露;最后,通过实例分析说明了方法的有效性,并对方法性能进行了实验分析.与现有的相关工作相比,针对隐私保护特征提出了隐私信息流安全模型,且分析方法考虑了隐私数据项聚合问题,从而能够更为有效地防止用户隐私信息非法泄露.
