Privacy-Preserving Orchestrated Web Service Composition with Untrusted Brokers

Author(s):  
Imen Khabou ◽  
Mohsen Rouached ◽  
Alexandre Viejo ◽  
David Sánchez

This article describes how by using web service composition to model different business processes is a usual tendency in the industry. More specifically, web service composition enables to separate a certain process in different activities that must be executed following a certain order. Each activity has its own set of inputs and outputs and is executed by a certain web service hosted by a service provider which can be completely independent. Among all the applications in which web service composition may be applied, this article focuses on a cloud-based scenario in which a business wishes to outsource the execution of a certain complex service in exchange for some economical compensation. It is for this reason, among the different composition approaches that exist in the literature, this article focuses on the orchestrated one, in which a broker coordinates the composition. One of the main issues of orchestrated systems is the fact that the broker receives and learns all the input data needed to perform the requested complex service. This behavior may represent a serious privacy problem depending on the nature of the business process to be executed. In this article, a new privacy-preserving orchestrated Web service composition system based on a symmetric searchable encryption primitive is proposed. The main target of this new scheme is to protect the privacy of the business that wish to outsource their operations using a cloud-based solution in which the broker is honest but curious, this is, this entity tries to analyze data and message flows in order to learn all the possible sensitive information from the rest of participants in the system.

Author(s):  
Imen Khabou ◽  
Mohsen Rouached ◽  
Alexandre Viejo ◽  
David Sánchez

This article describes how by using web service composition to model different business processes is a usual tendency in the industry. More specifically, web service composition enables to separate a certain process in different activities that must be executed following a certain order. Each activity has its own set of inputs and outputs and is executed by a certain web service hosted by a service provider which can be completely independent. Among all the applications in which web service composition may be applied, this article focuses on a cloud-based scenario in which a business wishes to outsource the execution of a certain complex service in exchange for some economical compensation. It is for this reason, among the different composition approaches that exist in the literature, this article focuses on the orchestrated one, in which a broker coordinates the composition. One of the main issues of orchestrated systems is the fact that the broker receives and learns all the input data needed to perform the requested complex service. This behavior may represent a serious privacy problem depending on the nature of the business process to be executed. In this article, a new privacy-preserving orchestrated Web service composition system based on a symmetric searchable encryption primitive is proposed. The main target of this new scheme is to protect the privacy of the business that wish to outsource their operations using a cloud-based solution in which the broker is honest but curious, this is, this entity tries to analyze data and message flows in order to learn all the possible sensitive information from the rest of participants in the system.


2009 ◽  
Vol 18 (02) ◽  
pp. 225-260 ◽  
Author(s):  
VALERIA DE CASTRO ◽  
ESPERANZA MARCOS ◽  
ROEL WIERINGA

In recent years, the automation of business processes has become one of the most prominent and promising uses of Web service technology. Consequently several languages have been created for the execution of business processes, making it possible to define new and more complex services or business processes which are implemented for example by means of Web service composition. Nevertheless, these kinds of languages are not suitable for use in the early stages of the development process of information systems. Special methodologies or techniques are therefore necessary to allow systems analysts to understand services from a business point of view, while facilitating the design and development of Web service composition. In this paper, we present a service-oriented approach to information system development that starts by identifying, through business modeling, the services required by the customers of a business, to make it possible to create a Web service composition model. This model will facilitate the transformation to specific languages for business process execution, thereby reducing the development efforts made in service-oriented applications. The method proposed is illustrated by means of a Web application for the management of medical images, which we have taken as a case study.


Author(s):  
Areeg Samir

Service-Oriented Architecture supports sharing resources and transforming business services into a set of linked Web services. Web services rely on non-functional attributes managed through Web Service standards (WS-*) and Quality of Service (QoS) specifications. However, traditionally, the functionality related to QoS and WS-* specifications is scattered and tangled all over the main service code, making the maintenance of these Web services expensive and complex. Aspect-Oriented Programming (AOP) provides abstraction techniques and language constructs to manage and separate these crosscutting concerns from other parts of the system. This chapter focuses on explaining the concepts of dynamic and adaptive Web service composition and proposes an adaptive Web service architecture to enhance reusability of services using the Aspect-Oriented approach. This approach enables separating crosscutting concerns such as QoS and WS-* specifications in aspect Web services and integrating them with the base Web services on the fly. This architecture is based on AO4BPEL, an aspect-oriented extension to BPEL, which reduces the complexity in dynamic selection and reuse of non-functional attributes. This methodology can facilitate dynamic composition of services and business processes in on-premise and Cloud computing environments.


2016 ◽  
pp. 2139-2158
Author(s):  
Areeg Samir

Service-Oriented Architecture supports sharing resources and transforming business services into a set of linked Web services. Web services rely on non-functional attributes managed through Web Service standards (WS-*) and Quality of Service (QoS) specifications. However, traditionally, the functionality related to QoS and WS-* specifications is scattered and tangled all over the main service code, making the maintenance of these Web services expensive and complex. Aspect-Oriented Programming (AOP) provides abstraction techniques and language constructs to manage and separate these crosscutting concerns from other parts of the system. This chapter focuses on explaining the concepts of dynamic and adaptive Web service composition and proposes an adaptive Web service architecture to enhance reusability of services using the Aspect-Oriented approach. This approach enables separating crosscutting concerns such as QoS and WS-* specifications in aspect Web services and integrating them with the base Web services on the fly. This architecture is based on AO4BPEL, an aspect-oriented extension to BPEL, which reduces the complexity in dynamic selection and reuse of non-functional attributes. This methodology can facilitate dynamic composition of services and business processes in on-premise and Cloud computing environments.


2014 ◽  
Vol 931-932 ◽  
pp. 1452-1456 ◽  
Author(s):  
Wutthipong Kongburan ◽  
Denduang Pradubsuwun

A web service composition is able to create a new service by incorporating some existing web services. Currently, Web Service Business Process Execution Language or WS-BPEL is a promising language used to describe the web service composition. Since in the real world most of business processes have been involved temporal context and they are quite complex interaction, it is impossible to completely eliminate all failures in them. Therefore, a formal verification is required to assure the correctness and reliability of the web service composition. In this paper, timed trace theory has been applied to verify the web service composition with temporal constraints. Both safety and timing failures can be examined. Experimenting with a ticket reservation system, the proposed approach shows its effectiveness.


Sign in / Sign up

Export Citation Format

Share Document