Web服务组合中的隐私需求规约与验证

确保用户的个人隐私数据不被非法收集和披露，是实现安全Web服务组合的一个关键问题，有必要在设计阶段验证服务组合是否满足隐私策略约束。 首先使用隐私策略规约服务的隐私权限, 然后利用带隐私语义的接口自动机对服务的接口行为进行建模。在此基础上，形式化地检验了服务组合行为是否满足隐私授权约束。基于上述验证过程所组合的Web服务，能有效地减轻对用户隐私数据的危害，增强了组合Web服务的安全性和可靠性。

Specification and verification of privacy requirements in Web service compositions

To prevent the private data of users from being illegally collected and disclosed is a critical thing in realizing the secure Web services composition. Hence, it is very necessary in the designing stage to verify whether the service compositions satisfy the constraints of privacy authorizations. Firstly, the privacy policies were used to specify the privacy privileges. Next, the interface behaviors of services were modelled by extending the interface automata to support privacy semantics. Furthermore, it was formally verified whether the behaviors of services composition satisfy the privacy policy constraints. The overall Web services based on the above processes can efficiently reduce the privacy risks to the users' personal data and thus strengthen the security and reliability of the overall Web services.