基于混沌理论的DCOM柔性安全机制

A flexible DCOM security-mechanism based on chaos

在分析DCOM原有安全机制的基础上,结合混沌理论中混沌映射对初始条件的敏感性、具有白噪声的统计特性和混沌系列容易生成的特点,提出了一种采用混沌对称加密算法和一次性混沌口令身份认证技术的用于增强DCOM安全机制柔性的新方案,以便能灵活地适应MIS系统中对信息安全的不同需求。该方案已成功应用于分布式铁路建设物资管理系统中,其安全性、高效性和灵活可控性都得到了有效验证。

In this paper, a new chaosbased scheme for enhancing DCOM (Distributed Component Object Model) security flexibility is proposed. The basic idea is to utilize the chaotic maps' characteristics of being sensitive to initial conditions, having the statistic property of white noises and being easy to generate chaotic sequences. Referring to this concept, the chaotic symmetric encryption algorithm and onetime chaotic password identity authentication method are given which can take over the existing DCOM security scheme. In particular, the utilization of the security policy file, as well as the GUI window, make contribution to the flexibility of DCOM security with higher efficiency and meet various security demands in MIS systems.