Privacy Requirement Description and Checking Method in Cloud Computing
-
摘要: 云计算已经成为一种计算范型为用户提供服务，但其开放性、虚拟化和服务外包化的特点使得用户的隐私信息难以控制和保护.以描述逻辑为基础，提出了一种云计算环境下面向语义的隐私需求描述与检测方法.首先，对用户隐私需求与服务提供者的隐私策略进行描述；其次，对两者之间是否存在冲突进行检测，发现满足用户隐私需求的服务；最后，利用Protégé本体建模工具对用户的隐私需求和服务提供者的隐私策略进行建模，并利用Pellet推理机进行了实验，分别对本体模型中的概念进行一致性检测和对概念与逻辑公理之间的可满足性进行检验，从而证明了此检测方法的正确性与可行性.Abstract: Cloud computing has been a computing paradigm to provide services for users. However, it is difficult to control and protect personal privacy information because of its opening, virtualization, multi-tenancy and service outsourcing characters. Therefore, how to prevent user privacy information from being used and propagated in cloud computing illegally has become a research focus. In this work, we propose a semantic-oriented privacy requirement description method and checking mechanism. First of all, we describe the user privacy requirement and privacy policy of service provider based on description logic. Secondly, we address the privacy requirement checking framework. Namely, we build the knowledge base through privacy disclosure assertion of user map to TBox and privacy disclosure assertion of service provider map to ABox, and then reason the TBox and ABox by taking advantage of the Tableau algorithm. In the end, we check whether there are the conflicts between user privacy requirement and privacy policy of service provider through experiment and case analysis. Namely, we build the privacy requirement checking model with Protégé of Stanford University, and prove the consistency of conceptions in model and the satisfiability between the conceptions and the logic axioms with Pellet reasonor. Thereby, the correctness and feasibility of our method is certified.
-
Keywords:
- cloud computing /
- description logic /
- privacy property /
- privacy policy /
- privacy preference
-
计量
- 文章访问数: 1210
- HTML全文浏览量: 0
- PDF下载量: 885
下载:
