Distributed Secure Service Composition with Declassification in Mobile Network
Ning Xi, Cong Sun, Jianfeng Ma, Yulong Shen, Di Lu · 2016
The regional and heterogeneous characteristic of mobile network pose a great challenge on information flow security during service composition. Although secure verification approaches based on standard noninterference provide a solid assurance on information flow security of composite service, too strict constraints on service components may cause the failure of composition procedure. In order to ensure the availability of composite service, we specify the declassification policies based on cryptographic operations to allow data to be legally declassified. And the improved distributed secure service composition framework and approach built on these declassification policies are proposed, which can realize that mobile service nodes cooperate with each other to complete the declassification and secure composition procedure. Through the experiment and evaluation, it indicates that our approach provides a more reliable and efficient way for secure service composition in mobile network.