随着无线传感器网络(WSN)、天地一体化信息网络等技术的快速发展,海量的传感器、终端设备接入到物联网中,它们面临的安全威胁不可忽视。通过密钥管理实现用户访问权限的分层访问控制在节点具有主从关系、隐私和安全等级差异的场景中得...随着无线传感器网络(WSN)、天地一体化信息网络等技术的快速发展,海量的传感器、终端设备接入到物联网中,它们面临的安全威胁不可忽视。通过密钥管理实现用户访问权限的分层访问控制在节点具有主从关系、隐私和安全等级差异的场景中得到良好的应用。由于网络节点频繁地加入、离开,导致网络拓扑结构动态变化,因此需要设计一种高效的密钥管理方案。提出一种基于ECC的分层密钥管理(EC-HKM,ECC based hierarchical key management)方案,该方案基于椭圆曲线上离散对数难问题,网络中每个节点都可以通过自己的私钥计算出子节点的密钥,达到分层访问控制的目标。方案包括系统建立、密钥更新、节点加入、删除等部分,同时给出方案的安全性和复杂度分析。展开更多
An access control model is proposed based on the famous Bell-LaPadula （BLP） model.In the proposed model,hierarchical relationships among departments are built,a new concept named post is proposed,and assigning secur...An access control model is proposed based on the famous Bell-LaPadula （BLP） model.In the proposed model,hierarchical relationships among departments are built,a new concept named post is proposed,and assigning security tags to subjects and objects is greatly simplified.The interoperation among different departments is implemented through assigning multiple security tags to one post, and the more departments are closed on the organization tree,the more secret objects can be exchanged by the staff of the departments.The access control matrices of the department,post and staff are defined.By using the three access control matrices,a multi granularity and flexible discretionary access control policy is implemented.The outstanding merit of the BLP model is inherited,and the new model can guarantee that all the information flow is under control.Finally,our study shows that compared to the BLP model,the proposed model is more flexible.展开更多
文摘随着无线传感器网络(WSN)、天地一体化信息网络等技术的快速发展,海量的传感器、终端设备接入到物联网中,它们面临的安全威胁不可忽视。通过密钥管理实现用户访问权限的分层访问控制在节点具有主从关系、隐私和安全等级差异的场景中得到良好的应用。由于网络节点频繁地加入、离开,导致网络拓扑结构动态变化,因此需要设计一种高效的密钥管理方案。提出一种基于ECC的分层密钥管理(EC-HKM,ECC based hierarchical key management)方案,该方案基于椭圆曲线上离散对数难问题,网络中每个节点都可以通过自己的私钥计算出子节点的密钥,达到分层访问控制的目标。方案包括系统建立、密钥更新、节点加入、删除等部分,同时给出方案的安全性和复杂度分析。
基金The National Natural Science Foundation of China(No.60403027,60773191,70771043)the National High Technology Research and Development Program of China(863 Program)(No.2007AA01Z403)
文摘An access control model is proposed based on the famous Bell-LaPadula （BLP） model.In the proposed model,hierarchical relationships among departments are built,a new concept named post is proposed,and assigning security tags to subjects and objects is greatly simplified.The interoperation among different departments is implemented through assigning multiple security tags to one post, and the more departments are closed on the organization tree,the more secret objects can be exchanged by the staff of the departments.The access control matrices of the department,post and staff are defined.By using the three access control matrices,a multi granularity and flexible discretionary access control policy is implemented.The outstanding merit of the BLP model is inherited,and the new model can guarantee that all the information flow is under control.Finally,our study shows that compared to the BLP model,the proposed model is more flexible.
