Analyzing And Verifying The Privacy Of Data In WS-BPEL Process Based On Automata

With the development of internet and data mining technoledge, the privacy of personal data has gained more and more attention by the user of internetware. As the functions of internetware are meeted by Web services and their combization, the non-functional requirement such as privacy protection of data should also be concerned. Web Services Business Process Execution Language, a widely used criterion in service compositon, employs message exchange to achieve the cooperation of web services. In this paper, we focuse on the privacy requirement of data in exchanged messages, and study a way to ensure the privacy of data in WS-BPEL process.Firstly, an analysis about privacy issues of data in WS-BPEL is presented. To eliminate the deficiency of privacy protection on data in current WS-BPEL, the privacy policy of P3P is stated to treat BPEL's data as a norm. Also, the personal data in WS-BPEL should be handled in accordance with the statement.That is a privacy-aware WS-BPEL process established.Then, based on automata, the privacy-aware WS-BPEL process's model called PBA, which can describe the WS-BPEL process's behaviors and the protection information of privacy policies, is presented to verify the privacy characteristic of data in WS-BPEL process. A set of mapping rules from WS-BPEL and P3P to PBA are defined. And an algorithm is developed to check whether all behaviors in WS-BPEL process comply with the privacy policies described by P3P. Moreover, we also give the verification of whether the given behaviors specified by UML sequence diagram are legal under the privacy policies.Finally, a prototype tool is designed and developed based on our research on the verification of WS-BPEL's privacy characteristic. The designer of BPEL process can use the tool to verify the privacy of data in his BPEL process expediently.