Research on UML Extension Model Oriented Privacy Engineering
|School||Harbin Engineering University|
|Course||Applied Computer Technology|
|Keywords||Privacy Engineering UML Privacy Element Privacy Goal PrivacyRequirement|
In recent years, as the popularity of network applications, more and more attention haspaid to the quality of software systems especially the privacy requirements. A majorchallenge in the field of software engineering is to make users trust the software they use intheir daily life, trusting software depends on various elements, the most important one is theprotection of user’s privacy. So, the privacy combined with software engineeringmethods—Privacy Engineering, has already became a new focus.Through the research of the exiting privacy engineering methods and softwaremodeling methods, the core of privacy engineering is to take into account the user’s privacyrequirement in the software development process. While the current software modelingmethods can not analysis and design the privacy requirements in software systems, such asUML. To meet these needs, a UML extension model oriented privacy engineering isproposed in this thesis called the UML_P model, this model introduced the elements ofprivacy engineering into UML, including privacy requirements，privacy goals，privacyprotocols，privacy model and privacy protection methods. Through introduction of theseprivacy elements UML_P model extends the original view of the UML modeling language,including UseCase_P, Activity_P, Sequence_P, State_P and Class_P. UML_P can not onlymodeling the function requirements but also modeling the privacy requirements of thesoftware system. UML_P can analysis the role and the impact of privacy requirements andprivacy goals in the whole system, and describe the privacy protocols and the privacy model,and provide reference principles for the privacy protection technologies to achieve theseprivacy requirements and privacy goals.The UML_P model on the basis of ensure thesoftware functional requirements, greatly improve the privacy of software, at the same timethe UML_P model can against malicious attack effectively.Finally, the usefulness of the UML_P mode is demonstrated by analysis and design ofa case and the future research of the UML_P model is discussed.