Privacy Data Analysis In Services Combination Process Based On CPN

With the rapid development of Internet and data mining technology, user of internet software paid more attention to personal privacy data security. Software established by a WEB service or the combination of WEB services should not only pay attention to functional requirements, but also pay attention to the other non-functional requirements, for example security of privacy data. BPEL is a Business Process Execution Language which is used widely in WEB services combination, BPEL process complish the cooperation of WEB services through the exchange of messages between services. In this dissertation, we analyze and verify whether the usage or the transmission of privacy data in BPEL process violate the privacy statute, the mian works is as follows:First,A CPN model for BPEL is established and the modeling method is described. The modeling method considers two aspects of process, behavior and data, the model describs the control flow and the data flow by parsing the WSDL document and BPEL document respectively.Second, User’s privacy needs are described by the extended P3P policy, the extended privacy policy which use the operation of the service combination and the access authority describe the purpose of privacy.Third, An algorithm for verification is designed. The algorithm extracts the privacy statute and the feasible path of process, the operation on the path, the input privacy data of the operation, the output privacy data of the operation from the XML document of privacy policy and the XML document of CPN model for service composition process. Finally the algorithm finds the feasible path and the operation on the path which violate the privacy statute.Fourth, A prototype system for privacy data analysis and validation of service combination is designed and developed. The system provides a guatantee for the security of privacy data in BPEL process. Finally, a example demonstrates the function of this system.