A Study on GML-Based Encryption Technology for Open-Source Software License and Service Structure Analysis in Cloud-Based Micro Service Architecture Environment

Micro-service architecture (MSA) refers to a structure in which several software with different roles are bundled into one service, rather than one or a small number of software when building a service. A lot of software is used to build a service with an MSA structure, and recently, open-source software is being actively used. Open-source software is not always available free of charge as each license exists. However, since commercialized MSA-structured cloud-based software does not provide execution code to consumers, it is difficult to check whether open-source software is used without permission. Therefore, even if the licenses granted by open-source software are violated or open-source software contains potential risks, it is very difficult for consumers to identify these issues. To solve this problem, a graph modeling language (GML) can be used as a method for analyzing the structure of software operating based on the cloud MSA environment and determining the open-source license included in the software. However, since GML contains a lot of information such as software structure and information, it can be abused by analyzing the software structure when GML is leaked. To solve this problem, in this study, we conduct research on how to encrypt GML and perform analysis in the encrypted state.