检索结果-南通市图书馆

维普期刊数据库

Cross-domain identity authentication scheme based on blockchain and pki system

在线全文

学校读者我要写书评

暂无评论

高置信计算(英文)

高置信计算(英文) 2023年第1期3卷 8-17页

作者： Hai Zhang Feng Zhao School of Information and Communication Guilin University of Electronic TechnologyGuilin 541004China School of Artificial Intelligence and Information Engineering Guangxi Electrical Polytechnic InstituteNanning 530299China

In vehicular ad hoc networks(VANET),the cross-domain identity authentication of users is very important for the development of VANET due to the large cross-domain mobility of vehicle users.The Public Key Infrastructure(pki)system is often used to solve the identity authentication and security trust problems faced by VANET.However,the pki system has challenges such as too centralized Authority of Certification Authority(CA),frequent cross-domain access to certificate interactions and high authentication volume,leading to high certificate management costs,complex cross-domain authentication paths,easy privacy leakage,and overburdened networks.To address these problems,this paper proposes a lightweight blockchain-based pki identity management and authentication architecture that uses smart contracts to reduce the heavy burden caused by CAs directly managing the life cycle of digital certificates.On this basis,a trust chain based on smart contracts is designed to replace the traditional CA trust chain to meet the general cross-domain requirements,to effectively avoid the communication pressure caused by a mass of certificate transmissions.For the cross-domain scenario with higher privacy and security requirements the identity attribute authentication service is provided directly while protecting privacy by using the Merkle tree to anchor identity attribute data on and off the blockchain chain.Finally,the proposed scheme was comprehensively analyzed in terms of cost,time consumption and security.

关键词： Vehicular ad hoc network pki Blockchain Cross-domain authentication

Inter-Cluster Routing Authentication for Ad Hoc Networks by a Hierarchical Key Scheme

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2006年第6期21卷 997-1011页

作者：黄悦民林华乙王宗一 Department of Engineering Science Cheng Kung University No.1 Ta-Hsueh Road Tainan 701 China

Dissimilar to traditional networks, the features of mobile wireless devices that can actively form a network without any infrastructure mean that mobile ad hoc networks frequently display partition due to node mobility or link failures. These indicate that an ad hoc network is difficult to provide ou-llne access to a trusted authority server. Therefore, applying traditional Public Key Infrastructure （pki） security framework to mobile ad hoc networks will cause insecurities. This study proposes a scalable and elastic key management scheme integrated into Cluster Based Secure Routing Protocol （CBSRP） to enhance security and non-repudiation of routing authentication, and introduces an ID-Based internal routing authentication scheme to enhance the routing performance in an internal cluster. Additionally, a method of performing routing authentication between internal and external clusters, as well as inter-cluster routing authentication, is developed. The proposed cluster-based key management scheme distributes trust to an aggregation of cluster heads using a threshold scheme faculty, provides Certificate Authority （CA） with a fault tolerance mechanism to prevent a single point of compromise or failure, and saves CA large repositories from maintaining member certificates, making ad hoc networks robust to malicious behaviors and suitable for numerous mobile devices.

关键词： ad hoc network pki CBSRP ID-based inter-cluster cluster-based CA （Certificate Authority）

Secure searchable public key encryption against insider keyword guessing attacks from indistinguishability obfuscation

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2018年第3期61卷 228-230页

作者： Lixue SUN Chunxiang XU Mingwu ZHANG Kefei CHEN Hongwei LI Center for Cyber Security School of Computer Science and EngineeringUniversity of Electronic Science and Technology of China School of Computer Science Hubei University of Technology School of Science Hangzhou Normal University Laboratory of Science and Technology on Communication Security

Public key encryption with keyword search(PEKS)enables one to search encrypted data containing some keyword without decrypting the data in public key setting.Boneh et al.[1]introduced the notion of PEKS,but later Byun et al.[2]showed the scheme in[1]is vulnerable to the outsider/insider keyword guessing attacks(KGA).Many previous PEKS studies have tackled the

关键词： SKS IND pki MAC SKR Mac PKR

Biometric-based personal identity-authentication system and security analysis

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

The Journal of China Universities of Posts and Telecommunications 2006年第4期13卷 43-47页

作者： LI Chao YANG Yi-xian NIU Xin-xin Information Security Centre Key Laboratory of Networking and Switching Technologies Beijing University of Posts and Telecommunications Beijing 100876 China

The traditional authentication system is based on the secret key, and is mainly based on public key infrastructure （pki）. Unfortunately, a key has many disadvantages, for example, the key can be forgotten or stolen, and can be easily cracked. Nowadays, authentication systems using biometric technology have become more prevalent because of the advantages over password-based authentication systems. In this article, several biometfic authentication models are presented, upon which most biometric authentication systems are based. Biometric authentication systems based-on these models provide high security for access control in non-face-to-face environment such as e-commerce, over open network.

关键词： biometric identity authentication pki security

维普期刊数据库

在线全文

学校读者我要写书评

暂无评论

基于MPT索引的高效链上pki模型

信息网络安全 2022年第8期 72-80页

作者：黄保华赵伟宏彭丽谢统义广西大学计算机与电子信息学院南宁530004 广西教育学院南宁530023

针对传统pki存在的单点故障和CA操作不透明等问题,文章提出一种基于MPT索引的高效链上pki模型。首先,将区块链作为证书库存储证书,将分布式CA节点作为区块链网络中的矿工节点处理证书请求,构建去中心化的pki模型。同时,设计证书管理算法... 详细信息

针对传统pki存在的单点故障和CA操作不透明等问题,文章提出一种基于MPT索引的高效链上pki模型。首先,将区块链作为证书库存储证书,将分布式CA节点作为区块链网络中的矿工节点处理证书请求,构建去中心化的pki模型。同时,设计证书管理算法,通过在证书中记录证书操作类型,实现证书注册、更新和撤销功能。其次,在该模型的基础上,通过键值对为每个区块内存储的证书构建MPT索引,并设计基于MPT索引的证书查询算法,实现根据证书ID快速查询链上证书的功能,扩展了传统区块链的查询语义,提升了查询效率。对比分析和实验结果表明,该模型能够有效提升pki的安全性,并拥有较高的证书查询效率。

关键词：区块链 pki MPT

维普期刊数据库

Towards a New Model for the Production of Civil Status Records Using Blockchain

在线全文

学校读者我要写书评

暂无评论

Journal of Information Security 2023年第1期14卷 52-75页

作者： Tankou Tsomo Maurice Eddy Bell Bitjoka Georges Ngohe Ekam Paul Salomon Laboratory of Electrical Engineering Mechatronics and Signal Processing ENSPY1 University of Yaoundé 1 Yaoundé Cameroon

The work presented in this article focuses on document forgery. Document fraud is a generic term used to designate a fraud, a falsification of a document. The said falsification can be observed in several sectors of everyday life. For a better illustration, let’s consider a system for producing civil status forms. The birth certificate is generally the basis of any individual’s life, and if this document is falsified, it can have repercussions at several levels, particularly in the academic field, where false diplomas, false national identity cards, false passports, false marriage certificates, etc. are obtained. It is therefore demonstrated that a secure production unit for civil status forms can be beneficial to both developed and developing countries. In addition, smart contract is proposed using a private Hyperledger fabric blockchain for validation of civil status documents, and a non-state public key management infrastructure is also proposed to authenticate the nodes that will validate the transactions. This improved blockchain solves the problem of falsification of civil status documents, as false nodes can contribute to the validation of a transaction. The contribution of such a hybrid system is of paramount importance for the identity of civil status documents on the one hand and for the identity of documents in general, and the blockchain to guarantee the distributed, unforgeable, non-repudiation, transparency and disintermediation character.

关键词： Blockchain Forgery pki Civil Status Documentary Identity

基于pki公钥体系的电力监控网络安全接入机制

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

沈阳工业大学学报 2023年

作者：章熙段金长刘晓放张洪略国电南瑞南京控制系统有限公司电力市场系统部贵州电力科学研究院电力调度控制中心

针对电力监控网络服务请求繁多、身份认证速度慢等网络拥塞问题，通过深入分析网络通信过程中数据泄漏发生原理，并基于pki机制下的挑战-响应模式对通信双方的密钥进行动态更新，利用哈希函数对用户身份在通信前做及时认证，设计了一种... 详细信息

针对电力监控网络服务请求繁多、身份认证速度慢等网络拥塞问题，通过深入分析网络通信过程中数据泄漏发生原理，并基于pki机制下的挑战-响应模式对通信双方的密钥进行动态更新，利用哈希函数对用户身份在通信前做及时认证，设计了一种安全电力监控网络安全的接入体系，实现对网络节点的信息化控制。实验表明，所提的基于pki机制的方案较传统基于对称机制的方案在牺牲少量计算代价的情况下，可实现通信数据高保密高可靠的效果，在密钥协商的相互认证阶段本文花费的通信开销相较于对称机制节省约4%。

关键词： pki 监控电力网动态密钥相互认证密钥更新哈希函数 DNP3

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

基于SIP的安全视频监控系统的研究与实现

基于SIP的安全视频监控系统的研究与实现

作者：吕龙洋北京邮电大学

学位级别：硕士

近年来,视频监控应用的广泛普及,为社会公共安全提供了保障。与此同时,视频监控系统也面临着来自各种网络层面的信息安全挑战,例如设备安全、通信安全、存储安全等问题。本文针对近年来国内外的视频监控系统相关安全课题进行了研究,选择... 详细信息

近年来,视频监控应用的广泛普及,为社会公共安全提供了保障。与此同时,视频监控系统也面临着来自各种网络层面的信息安全挑战,例如设备安全、通信安全、存储安全等问题。本文针对近年来国内外的视频监控系统相关安全课题进行了研究,选择SIP协议来设计一个安全视频监控系统,基于pki/CA的分布式数字证书管理平台,进行视频数据和用户身份的保护与认证,实现可信的数据交互以及身份的识别。论文首先针对视频监控系统内的安全问题,本文设计了一种以国密pki为基础的安全交互方案,改进了 SIP协议原有的认证方式,通过可信的第三方颁发的证书,结合私钥签名与摘要值校验,实现了用户、前端设备以及SIP服务器之间的双向身份认证;设计了一种基于关键值摘要的信令完整性保护机制,通信双方协商视频密钥加密密钥,结合密钥与时间戳,对关键值信息计算摘要,实现信令的完整性保护。论文进一步针对传统pki所存在的单点故障、跨域认证困难的问题,设计了一种以区块链架构为底层的的分布式国密视频数字证书管理平台,利用区块链去中心化、交易一致性、信息透明等特性,实现了一种多CA证书签发机制,利用链码设计实现对区块链证书的查询、颁发和撤销操作。基于上述研究,本文设计实现了一个安全视频监控系统,对视频监控、安全证书管理等功能进行了测试,验证了系统的有效性。

关键词：视频监控 pki 身份认证信令保护区块链分布式

同方学位论文库评论

在线全文

同方学位论文库

学校读者我要写书评

暂无评论

基于物理不可克隆函数的芯片安全技术研究

基于物理不可克隆函数的芯片安全技术研究

作者：李进电子科技大学

学位级别：硕士

信息技术的高速发展也伴随着众多安全问题,芯片作为现代信息技术的重要载体,芯片安全防护技术的研究成为了集成电路领域的重要课题。物理不可克隆函数（PUF）是指从芯片中提取出制造阶段的工艺偏差,作为芯片的唯一性硬件指纹。本文针对... 详细信息

信息技术的高速发展也伴随着众多安全问题,芯片作为现代信息技术的重要载体,芯片安全防护技术的研究成为了集成电路领域的重要课题。物理不可克隆函数（PUF）是指从芯片中提取出制造阶段的工艺偏差,作为芯片的唯一性硬件指纹。本文针对芯片供应链和芯片数据保护等方面的潜在安全问题,研究利用物理不可克隆函数增强芯片安全性的方法。传统的RO PUF通过比较两个RO产生一位有效输出,对于频率从信息的利用率较低,因此本文研究了更高效的信息提取方法。本文从基于FPGA的RO PUF电路出发,根据电路中决定延时的关键参数建立了RO PUF的延时基本模型。基于建立的延时模型,本文分析了基于频率的高阶差分方法的基本原理,并指出了其在三阶以上差分结果误码率较高的问题,提出了在对频率的二阶差分结果先求和再作差分的方法,可以提取出额外的8比特有效信息,通过和高阶差分方法的二三阶差分结果组合后,可以获得共32比特输出,实验结果表明组合方法的稳定性为99.15%,唯一性为49.05%,论文的稳定性指标相较于高阶差分熵提取方法具有优越性。针对芯片在供应链各个环节中可能遭受的恶意攻击,本文结合PUF和pki技术建立了安全身份认证系统。利用PUF和BCH等其他硬件电路为芯片提供唯一性密钥,并基于该密钥为合法的芯片颁发数字证书,芯片、密钥、数字证书相互绑定,在供应链系统中,仅有拥有合法证书的芯片才能通过认证进入下一环节。本文介绍了基于Xilinx PYNQ开发的认证系统的软硬件结构及实现原理,实验测试结果表明电路原始相应输出误码率仅为0.2%,经纠错电路处理后能在不同环境温度下保证正确输出,具有良好的稳定性。针对物联网设备中用户的数据和程序可能被窃取、篡改等风险,本文设计了基于PUF的安全芯片,分别实现了基于PUF的固件保护和数据加解密方案。通过将PUF和摘要算法结合,可以从芯片中提取认证消息和加密密钥,分别用于固件认证和用户数据加解密,利用PUF输出随机性和不可克隆特性,使得芯片即使被攻击者窃取也能保护用户的数据安全。本文主要完成了芯片的功能定义、代码实现、逻辑综合等前端工作,并分别分析了各项工作的结果。

关键词：物理不可克隆函数（PUF）芯片安全 pki 身份认证数据保护