Research On Privacy-Enhancing Technologies In Distributed Environment

With the rapid development of computer and network communication technology, distributed computing technology now see an increasing range of applications in areas like bank, hospital, government and e-commerce.Web service is a new generation of distributed computing technology, resources are distributed in heterogeneous services and they are exchanged through computer networks. In a web service system containing mutually distrusting services, sharing data with distrusting service or receive data from other distrusting service may leak private information. So confidentiality and integrity and of services are a major challenge for web service system.Existing privacy protection schemes are mainly derived from access control technology. Nevertheless access control does not ensure end-to-end security, that is to say it does not permit controlling to whom data can be transferred once it has been accessed. A solution to perform end-to-end security is to control information flows. Decentralized label model is a model for controlling information flow in systems with mutual distrust and decentralized authority. It allows mutually distrusting entities to describe confidentiality and integrity policies.In this paper, we propose a web service model (LWSM) based on decentralized label model, which could support message transfer between mutually distrusted services without leaking privacy. On the basis of LWSM, a solution to the security issue of information flow in WS-BPEL using static check is given and studied. In this paper, we design and implement a LWSM service development tool and WS-BPEL information flow checker according to our research.