Design And Implementation Of Bpel Secure Execution Environment

With the growing of cloud computing and Web Service technology, Web Service composition becomes the focus of the industry. Web Service composition contains a series of independent Web Service components and combines these components to create new business process. BPEL is a XML-based business process description language which is used to describe the internal logical relation between the Web Service components of a Web Service composition process. BPEL could gather all the Web Services through control structure to complete complex business logic and meet business needs.Web Service components are mostly distributed in the cloud environment and owned by others, so process developers cannot know about the details of these components, neither can they predict the conflicts or errors during the BPEL process execution period. Furthermore, the complex condition of network and the logical defects of BPEL process could also lead to execution failure. These errors cannot be detected during design period. Instead they can only be caught during the BPEL process execution period. Current BPEL engines lack effective detection and monitoring mechanism for BEPL execution errors, which may leave a security risk for the BPEL engines.This paper designed and implemented a BPEL Secure Execution Environment. The environment combines static check and dynamic monitoring technology to detect threats exist in BPEL process. When it find unsafe BPEL process or instance, the environment will make warning and control actions in time to ensure the security and stability throughout the whole environment. In order to meet the needs of distributed deployment architecture, BPEL Secure Execution Environment uses Spring framework to build and initialize. It can either embed a BPEL engine to monitor local process, or monitor multiple BPEL engines distributed in the cloud by configuring the security policy file. The environment has good flexibility and scalability.This paper first describes the background and significance of the BPEL Secure Execution Environment and gives a brief introduction of related technologies. Then the requirement analysis and key technology research is introduced based on the system objectives and typical business scenarios. According to the conclusions, the paper will elaborate the overall structure design of the environment and the implementation of the key modules and algorithms. Finally, the last part of the paper will present a prototype system to test the validity and reliability of the environment, and make a conclusion about it and where it can be improved.