面向超媒体链接的RESTful服务隐私建模方法

发布时间：2018-11-10 07:59

【摘要】：表述性状态传递(RESTful)服务已成为当前以云计算、物联网为代表的泛在服务体系结构中使用最广泛的服务交互方式.与传统SOAP/WS-*Web服务不同,RESTful服务的超媒体特性使得其服务响应中常包含能作为引擎驱动新资源调用的链接.RESTful服务请求/响应过程包含复杂的内部状态变迁,也带来了更大的隐私泄露风险.如何在超媒体驱动的动态交互方式中精确刻画隐私活动并支持面向隐私需求的验证,是RESTful服务隐私保护的1个基本问题.提出了一种RESTful服务应用状态隐私的形式化模型并研究了从RESTful服务描述向此模型的自动转换方法.在该模型中,不仅通过RESTful服务中隐私活动的元建模确保了对隐私操作的精确刻画,同时形式化定义了RESTful服务资源操作、链接等基本概念以及之间的关联关系.最后讨论了该理论方法的实现框架,并通过案例分析和基于自行开发的实现工具的实验说明了方法的可用性.
[Abstract]:Character-state delivery of (RESTful) services has become the most widely used service interaction method in the service architecture represented by cloud computing and the Internet of things. Unlike traditional SOAP/WS-*Web services, the hypermedia features of RESTful services often contain links in their service responses that can be used as engines to drive new resource invocations.The RESTful service request / response process contains complex internal state transitions. It also poses a greater risk of privacy leaks. How to accurately depict privacy activities in hypermedia-driven dynamic interaction and support the verification of privacy requirements is a basic problem of privacy protection for RESTful services. In this paper, a formal model of RESTful service application state privacy is proposed and an automatic transformation method from RESTful service description to this model is studied. In this model, not only the metamodel of privacy activities in RESTful services ensures the accurate description of privacy operations, but also the basic concepts of RESTful services resource operations, links and their relationships are formalized. Finally, the implementation framework of the theory and method is discussed, and the usability of the method is illustrated by case analysis and experiments based on self-developed implementation tools.
【作者单位】：南京航空航天大学计算机科学与技术学院;
【基金】：国家自然科学基金项目(61272083,61262002) 国家“八六三”高技术研究发展计划基金项目(2015AA015303)~~
【分类号】：TP309

【相似文献】