保护私有数据的云工作流调度方法

Cloud workflow scheduling method with data privacy protection

为解决云工作流中数据资源的私有性问题,提出一种保护私有数据的云工作流调度方法。针对云工作流中数据资源之间依赖关系和互斥关系并存的特点,提出扩展中国墙的云工作流私有性策略模型,对资源分配中的利益冲突问题进行精确描述;提出云工作流私有性策略描述语言,采用基于逻辑语言的分析方法,将策略形式化表达为一组逻辑规则集,通过对规则的逻辑推理可对策略的一致性进行分析和检验;基于上述策略模型和描述语言,提出保护私有资源的云工作流调度方法,并证明了该调度方法不会违背用户设定的数据资源私有性策略。

To solve the data privacy problem of cloud workflows, a cloud workflow scheduling method to protect data privacy was presented. Aiming at the coexistence of dependent relationship and mutex relationship among data re- sources, a privacy policy model of cloud workflow to extend Chinese wall model was proposed for precisely tackling the conflict-of-interest problem during resource allocation. A privacy policy description language was proposed, which could formulize the privacy policies as a set of logic rules so that the consistency of the privacy policies could be analyzed and verified by logic reasoning. Based on above model and language, a workflow scheduling approach was put forward. It was proved that the approach did not violate the privacypolicies for data protection.