CWI/CTIF seminar Oct2011. Integrating context- and content-aware mobile services into the cloud

Transcription

1 Center for Wireless Innovation Norway cwin.no CWI Norway CWI/CTIF seminar Oct2011 Integrating context- and content-aware mobile services into the cloud Josef Noll, Zahid Iqbal, Mohammad M.R. Chowdhury University of Oslo/UNIK Member of CWI Norway

2 Outline Business collaboration for Future Internet From Sensors to Services Security, privacy and dependability in sensor systems Security in heterogeneous systems Sensors & Mobile in the Cloud example: virus protection trust-based privacy - trust the cloud? content- and context-awareness System architecture Identity-based access PID, SID, CID awareness implementation through semantic technologies Conclusions 2

3 Collaborative Enterprise Computing Paradigm Collaborative Enterprise Computing Combination of (i) Cloud Computing (ii) Social Computing (iii) Semantic Web Integrated Operations for Future Services here: service cloud focus: privacy, trust focus: integration, reasoning

4 Need for new & highly scalable technologies Sensors Downhole & onboard facilities Process control systems 40 bill US$ added economic value ( ) Integrated Operations on the NCS - OLF numbers Broadband communication Fiber optic cables & wireless networks source: Kaare Finbak, IBM 4

5 Security Challenges in sensorenabled clouds Security, here security (S) Cloud services privacy (P) dependability (D) across the value chain from sensors to services measurable security? Intelligence Overlay Network Sensors, Embedded Systems challenge: physics challenge: physics System Is made by Components and functionalities Could be SPD Components, SPD functionalities can be composed 5

6 Sensors/Mobile in the cloud Example: service download through secured cloud services (virus-protection) Trust the cloud? Cloud versus SIM 6

7 My phone collects all my security SIM with NFC & PKI 7

8 User-centric representation in the cloud Representation of the user through the mobile - my digital representative Distributed representation in the cloud - virtual mobile Corporate Identity - CID Social Identity - SID Privacy in the mobile (Personal) PID ensures/enables user-centric privacy cloud reasoning PID s User profile, privacy Community Roles, Identities Context, Presence Mobile cloud (virtual mobile) Contacts, Calendar, Context, SMS, ,... security User behaviour Location, Proximity SID CID 8

9 System view Identities (and roles) social identity - SID - (relations,...) corporate identity - CID - (roles,...) personal identity - PID - (sensitive data) Trust relation Context & content-aware SID CID Trust virtual Cloud services Service provider trust-based reasoning s s s PID profile preferences trustempowered context trust-empowered mobile cloud 9

10 Collaboration Framework Collaboration Ensemble Engine Provides information in the cloud Criterion Manager provides trust-based criteria Access Manager semantic attribute-based access Access manager Collaboration Ensemble Engine Criterion Manager

11 Semantic Representation Cloud service representation through semantic integration Overlay Policy-based Core Services Policy Trust Composition System Discovery Desired service Intelligence Overlay Cloud services Suggested service Overlay Embedded Intelligence Network Sensors, Embedded Systems s OWL goals OWL integration Semantic Technologies OWL integration 11

12 User profile ontology User profile ontology individual interests distributed for areas multiple roles Profile access coarse distribution Profile

13 Trust ontology Trust based on direction context topic Trust types direct (announced) Trust reputation history

14 Implementation: OWL Restrictions Through OWL restriction we can specify that the Class A to be a subclass of Class B, then every individual of Class A is also an individual of Class B. Restriction Category - Quantifier Restrictions - Cardinality Restrictions - hasvalue Restrictions OWL restrictions guarantee access to trust-based context data

15 Quantifier & value restrictions There are two quantifier and one value restrictions Existential Restriction Known as somevaluesfrom Existential restrictions describe the set of individuals that have at least one specific kind of relationship to individuals that are members of a specific class. Universal Restriction Known as allvaluesfrom Existential restrictions describe the set of individuals that have at least one specific kind of relationship to individuals that are members of a specific class. hasvalue Restriction describes an anonymous class of individuals that are related to another specific individual along a specified property.

16 Cardinality Restrictions Comes in three flavors Minimum Cardinality: specify the minimum number of relationships that an individual must participate in for a given property Maximum Cardinality: specify the maximum number of relationships that an individual can participate in for a given property Cardinality Restriction: specify the exact number of relationships that an individual must participate in for a given property. properties used for semantic access

17 Idea Ontology (some classes) Definition of idea with OWL Restrictions Definition of ExcellentIdea, helps reasoner to classify any idea as excellent.

18 Conclusions Access manager Future services means business collaboration Collaborative enterprise computing based on Collaboration Ensemble Engine Collaboration Criterion Manager Access Manager Ontologies for user profiles (adapted from WWRF) trust context and content Description Logic for Reasoning Challenges real-world complexity - can we represent? topic specific trust-metrics Intelligence Overlay Cloud services Network Sensors, Embedded Systems Collaboration Ensemble Engine Criterion Manager Collaborative Radio & Operation, the driver for cost-effective future wireless broadband networks 18