EPC信息共享网络的隐私保护策略研究

Policy-based Privacy Protection for EPC Information-Sharing Network

安全和隐私是影响无线射频识别(RFID)技术在各个应用领域进一步发展的关键问题,目前尚没有人从管理、运作和技术等层面深入探究过来自供应链整个域上的安全和隐私风险。本文试图研究提出一个面向EPC信息共享网络的隐私保护策略框架,以解决RFID网络大规模部署所面临的各种访问许可与授权问题。首先分析了EPC网络信息共享的隐私保护需求,接着讨论了发现服务的访问控制框架,然后以一个典型的供应链RFID应用实例为背景,围绕用户端的访问控制和服务端的访问控制需求,分析了EPC发现服务应制定出的各种隐私保护策略。最后,针对这种复杂分布式安全策略管理问题,研究了其可能的实现机制。

Security and privacy has been a significant factor for further development of RFID technology,currently rarely has explored security and privacy risks in depth over the entire supply chain domain from the management,operational and technical levels.Here we are trying to propose a policy-based privacy protection framework for EPC network system,aiming at addressing many typical access control requirements for a large scale RFID Network deploymen.We first analyze the information-sharing model of EPC Network,then propose a basic access control framework of Discovery Services.After that,taking a RFID application in the supply chain for example,we analyze various access control policies of Discovery Services both in client-side and in service-side.Finally,we analyze a potential implementation and considerations over the manageability of complex distributed security policies.