计算机集成制造系统 ›› 2019, Vol. 25 ›› Issue (第4): 946-953.DOI: 10.13196/j.cims.2019.04.017

• 当期目次 • 上一篇    下一篇

基于微服务架构和支持业务过程可靠执行的数据通信方法

王焕强1,2,俞东进1,2+,金一科1,2,袁友伟1,2   

  1. 1.杭州电子科技大学计算机学院
    2.杭州电子科技大学复杂系统建模与仿真教育部重点实验室
  • 出版日期:2019-04-30 发布日期:2019-04-30
  • 基金资助:
    国家自然科学基金资助项目(61472112);浙江省重点研发资助项目(2017C01010,2016F50014,2015C01040)。

Data communication method based on microservice architecture to support reliable execution of business processes

  • Online:2019-04-30 Published:2019-04-30
  • Supported by:
    Project supported by the National Natural Science Foundation,China(No.61472112),and the Zhejiang Provincial Key Science and Technology Program Foundation,China(No.2017C01010,2016F50014,2015C01040).

摘要: 由于业务过程活动之间存在着频繁的数据通信以及微服务架构自身的松耦合特点,基于微服务架构的业务过程管理系统普遍存在着诸如中间人攻击等相关通信安全问题。为此,提出一种基于微服务架构和支持业务过程可靠执行的混合加密数据通信方法。首先构建了一个额外的第三方非对称加密服务,然后通过数字签名的生成和公钥的验证两个阶段保证混合加密算法中传输密钥的安全,最后通过安全传输的秘钥保证通信数据的不可篡改和不可否认。实验对比了所提安全通信方法和传统混合加密通信方法的通信效率,结果表明,所提方法在保证通信安全的前提下具有良好的通信效率,可支持业务过程的可靠执行。

关键词: 业务过程管理, 微服务, 通信安全, 数据加密, 混合加密算法

Abstract: Due to the frequent data communication among activities in the processes and the loose coupling characteristics of the microservice architecture,the business process management systems based on microservice architecture generally have the communication security problems such as man-in-the-middle attacks.For this problem,Therefore,a hybrid encryption data communication method based on microservice architecture was proposed to support reliable execution of business processes.An additional third-party asymmetric encryption service was constructed,and the security of transmission key in the hybrid encryption algorithm was ensured through the two stages of generating digital signatures and verifying public keys.The unmodifiable and non-repudiation of the data communication was guaranteed with the key of secure transmission.The communication efficiency of the proposed secure communication method and the traditional hybrid encryption communication method were compared by experiment,and the result showed that the proposed method had the good communication efficiency under the premise of ensuring communication security and could support the reliable execution of business process.

Key words: business process management, microservices, communication security, data encryption, hybrid encryption algorithm

中图分类号: