Cloud computing is very useful for big data owner who doesn't want to manage IT infrastructure and big data technique details. However, it is hard for big data owner to trust multi-layer outsourced big data system...Cloud computing is very useful for big data owner who doesn't want to manage IT infrastructure and big data technique details. However, it is hard for big data owner to trust multi-layer outsourced big data system in cloud environment and to verify which outsourced service leads to the problem. Similarly, the cloud service provider cannot simply trust the data computation applications. At last,the verification data itself may also leak the sensitive information from the cloud service provider and data owner. We propose a new three-level definition of the verification, threat model, corresponding trusted policies based on different roles for outsourced big data system in cloud. We also provide two policy enforcement methods for building trusted data computation environment by measuring both the Map Reduce application and its behaviors based on trusted computing and aspect-oriented programming. To prevent sensitive information leakage from verification process,we provide a privacy-preserved verification method. Finally, we implement the TPTVer, a Trusted third Party based Trusted Verifier as a proof of concept system. Our evaluation and analysis show that TPTVer can provide trusted verification for multi-layered outsourced big data system in the cloud with low overhead.展开更多
在实际应用中,多所有者RFID标签的所有权不仅是由于标签的所有者发生了变化而改变,每个所有者所占有的权重比例发生变化也会导致标签的所有权发生改变。因此,文中提出了一种带可信第三方(Trusted Third Party,TTP)的多所有者内部权重变...在实际应用中,多所有者RFID标签的所有权不仅是由于标签的所有者发生了变化而改变,每个所有者所占有的权重比例发生变化也会导致标签的所有权发生改变。因此,文中提出了一种带可信第三方(Trusted Third Party,TTP)的多所有者内部权重变化标签所有权协议用以解决该问题,因为存在TTP参与所有权的转换,所以所有者完全地将对标签的所有权转移给了权重变化后的所有者,即具备原所有者无关性。该协议采用了Lagrange多项式插值法和Shamir秘密共享门限方案,并使用GNY逻辑进行了安全性分析,结果表明该协议能抵抗转换过程中的多种攻击。同时,仿真实验结果表明标签耗时和计算量都处于可接受的范围之内。展开更多
分布式云存储技术为数量日益庞大的机载软件提供了新的分发与存储方式,这意味着航空公司失去了对软件的直接控制,因此机载软件安全成为了航空公司十分关注的问题。为了提高云存储环境下机载软件的安全性,提出了一种基于可信隐式第三方(T...分布式云存储技术为数量日益庞大的机载软件提供了新的分发与存储方式,这意味着航空公司失去了对软件的直接控制,因此机载软件安全成为了航空公司十分关注的问题。为了提高云存储环境下机载软件的安全性,提出了一种基于可信隐式第三方(Trusted Implicit Third Party,TITP)的机载软件审计方法对云上机载软件进行监控与管理,以确保机载软件的完整性。此外,由部署在云端的可信硬件代替用户进行审计工作,解决了可公开验证审计机制中第三方审计者不完全可信的问题,并以日志的方式记录审计结果以供用户查询。运用可信硬件进行完整性验证不仅降低了用户计算成本,而且缩短了用户在线时间。与其他可信隐式第三方审计方法进行实验对比,所提方法在审计计算过程中节省了10%的时间消耗。展开更多
Initial trust has been proved to be a crucial antecedent of Proper Risk Allocation(PRA)which benefits the improvement of construction project management.However,In the context of China,employer’s lack of trust in the...Initial trust has been proved to be a crucial antecedent of Proper Risk Allocation(PRA)which benefits the improvement of construction project management.However,In the context of China,employer’s lack of trust in the unfamiliar contractor without prior trade experience is the main obstacle that prevents employer from using the RPA.The aim of this paper is to create a better understanding of a specific path of building trust named trust transfer.In this paper,we first reviews related literatures and sum up the main feature of the trust transfer from the other context(e.g.E-business),and proposed the conceptualization of trust transfer in construction project marketplace.And then,according the feature of the trust transfer,we describe the basic model of the trust transfer in the construction project marketplace including employer as the trustor,the third party(source)and the unfamiliar contractor as trustee(target),and the relationship between these three nodes.At last,we analyze the type of the third party and the relationship of the trust transfer in the context of construction project.展开更多
在隐私计算的实际工业场景中通过构建密码学的多方安全算法与协议、采用同态加密以及联邦学习等技术使得互不信任的参与方能够共同完成联合计算,为了保护密钥及秘密信息安全、提升计算效率及降低通信代价等方面,通常引入辅助第三方完成...在隐私计算的实际工业场景中通过构建密码学的多方安全算法与协议、采用同态加密以及联邦学习等技术使得互不信任的参与方能够共同完成联合计算,为了保护密钥及秘密信息安全、提升计算效率及降低通信代价等方面,通常引入辅助第三方完成相应的秘密信息管理、密文交换与转发,从而加快工业应用进程,进一步提升整体安全性,实现风险可控,并且在可监管可审计的特殊要求场景中也能发挥较大的作用.这些第三方角色与理论意义上的可信第三方存在显著差异,而目前尚没有从安全性角度对不同类型的辅助第三方进行明确的论述.从全新的角度根据隐私计算中第三方的作用梳理了当前典型隐私计算场景中的技术方法,并提取这些第三方角色的共性,明确其和传统可信第三方的区别,统一作出定义并进一步概括为公正第三方(fair trusted party FTP).展开更多
针对现有的所有权转移协议,大多只涉及到单个标签的所有权转移过程,普遍存在隐私数据泄露、所有权转移过程不稳定等问题,该文在轻量级加密算法的基础上,提出一种改进的共享所有权转移协议(TSOTP,TTP model shared ownership transfer pr...针对现有的所有权转移协议,大多只涉及到单个标签的所有权转移过程,普遍存在隐私数据泄露、所有权转移过程不稳定等问题,该文在轻量级加密算法的基础上,提出一种改进的共享所有权转移协议(TSOTP,TTP model shared ownership transfer protocol),采用基于可信第三方(TTP,trusted third party)的对称加密机制,在完成初始标签认证后,通过TTP授权认证,使用对称加密算法,产生群组对称密钥,新所有者利用共享群组密钥对标签身份进行认证,然后为标签分配新的密钥,从而最终获得授权,读取标签中包含的药材敏感数据。TSOTP协议能够提高标签在所有权转移过程中的稳定性,很好地实现所有权在共享用户之间的安全转移,保证标签的数据安全,减少隐私数据泄露、Dos攻击、重放攻击等风险,提高前向与后向安全性,同时可以避免所有权重复转移,简化了标签认证计算量。经过试验证明,TSOTP协议与群组所有权转移协议(GOT,group ownership transfer)协议相比,标签数据库认证消耗时间节省57%,标签计算量消耗时间节省38%,能够成功阻止重放攻击和异步攻击等,具备较好的稳定性和认证效率,可以满足中药材质量溯源系统的研究需要,研究结果为建立中药材质量溯源系统的标签安全机制提供了技术参考。展开更多
基金partially supported by grants from the China 863 High-tech Program (Grant No. 2015AA016002)the Specialized Research Fund for the Doctoral Program of Higher Education (Grant No. 20131103120001)+2 种基金the National Key Research and Development Program of China (Grant No. 2016YFB0800204)the National Science Foundation of China (No. 61502017)the Scientific Research Common Program of Beijing Municipal Commission of Education (KM201710005024)
文摘Cloud computing is very useful for big data owner who doesn't want to manage IT infrastructure and big data technique details. However, it is hard for big data owner to trust multi-layer outsourced big data system in cloud environment and to verify which outsourced service leads to the problem. Similarly, the cloud service provider cannot simply trust the data computation applications. At last,the verification data itself may also leak the sensitive information from the cloud service provider and data owner. We propose a new three-level definition of the verification, threat model, corresponding trusted policies based on different roles for outsourced big data system in cloud. We also provide two policy enforcement methods for building trusted data computation environment by measuring both the Map Reduce application and its behaviors based on trusted computing and aspect-oriented programming. To prevent sensitive information leakage from verification process,we provide a privacy-preserved verification method. Finally, we implement the TPTVer, a Trusted third Party based Trusted Verifier as a proof of concept system. Our evaluation and analysis show that TPTVer can provide trusted verification for multi-layered outsourced big data system in the cloud with low overhead.
文摘在实际应用中,多所有者RFID标签的所有权不仅是由于标签的所有者发生了变化而改变,每个所有者所占有的权重比例发生变化也会导致标签的所有权发生改变。因此,文中提出了一种带可信第三方(Trusted Third Party,TTP)的多所有者内部权重变化标签所有权协议用以解决该问题,因为存在TTP参与所有权的转换,所以所有者完全地将对标签的所有权转移给了权重变化后的所有者,即具备原所有者无关性。该协议采用了Lagrange多项式插值法和Shamir秘密共享门限方案,并使用GNY逻辑进行了安全性分析,结果表明该协议能抵抗转换过程中的多种攻击。同时,仿真实验结果表明标签耗时和计算量都处于可接受的范围之内。
文摘分布式云存储技术为数量日益庞大的机载软件提供了新的分发与存储方式,这意味着航空公司失去了对软件的直接控制,因此机载软件安全成为了航空公司十分关注的问题。为了提高云存储环境下机载软件的安全性,提出了一种基于可信隐式第三方(Trusted Implicit Third Party,TITP)的机载软件审计方法对云上机载软件进行监控与管理,以确保机载软件的完整性。此外,由部署在云端的可信硬件代替用户进行审计工作,解决了可公开验证审计机制中第三方审计者不完全可信的问题,并以日志的方式记录审计结果以供用户查询。运用可信硬件进行完整性验证不仅降低了用户计算成本,而且缩短了用户在线时间。与其他可信隐式第三方审计方法进行实验对比,所提方法在审计计算过程中节省了10%的时间消耗。
文摘Initial trust has been proved to be a crucial antecedent of Proper Risk Allocation(PRA)which benefits the improvement of construction project management.However,In the context of China,employer’s lack of trust in the unfamiliar contractor without prior trade experience is the main obstacle that prevents employer from using the RPA.The aim of this paper is to create a better understanding of a specific path of building trust named trust transfer.In this paper,we first reviews related literatures and sum up the main feature of the trust transfer from the other context(e.g.E-business),and proposed the conceptualization of trust transfer in construction project marketplace.And then,according the feature of the trust transfer,we describe the basic model of the trust transfer in the construction project marketplace including employer as the trustor,the third party(source)and the unfamiliar contractor as trustee(target),and the relationship between these three nodes.At last,we analyze the type of the third party and the relationship of the trust transfer in the context of construction project.
文摘在隐私计算的实际工业场景中通过构建密码学的多方安全算法与协议、采用同态加密以及联邦学习等技术使得互不信任的参与方能够共同完成联合计算,为了保护密钥及秘密信息安全、提升计算效率及降低通信代价等方面,通常引入辅助第三方完成相应的秘密信息管理、密文交换与转发,从而加快工业应用进程,进一步提升整体安全性,实现风险可控,并且在可监管可审计的特殊要求场景中也能发挥较大的作用.这些第三方角色与理论意义上的可信第三方存在显著差异,而目前尚没有从安全性角度对不同类型的辅助第三方进行明确的论述.从全新的角度根据隐私计算中第三方的作用梳理了当前典型隐私计算场景中的技术方法,并提取这些第三方角色的共性,明确其和传统可信第三方的区别,统一作出定义并进一步概括为公正第三方(fair trusted party FTP).
文摘针对现有的所有权转移协议,大多只涉及到单个标签的所有权转移过程,普遍存在隐私数据泄露、所有权转移过程不稳定等问题,该文在轻量级加密算法的基础上,提出一种改进的共享所有权转移协议(TSOTP,TTP model shared ownership transfer protocol),采用基于可信第三方(TTP,trusted third party)的对称加密机制,在完成初始标签认证后,通过TTP授权认证,使用对称加密算法,产生群组对称密钥,新所有者利用共享群组密钥对标签身份进行认证,然后为标签分配新的密钥,从而最终获得授权,读取标签中包含的药材敏感数据。TSOTP协议能够提高标签在所有权转移过程中的稳定性,很好地实现所有权在共享用户之间的安全转移,保证标签的数据安全,减少隐私数据泄露、Dos攻击、重放攻击等风险,提高前向与后向安全性,同时可以避免所有权重复转移,简化了标签认证计算量。经过试验证明,TSOTP协议与群组所有权转移协议(GOT,group ownership transfer)协议相比,标签数据库认证消耗时间节省57%,标签计算量消耗时间节省38%,能够成功阻止重放攻击和异步攻击等,具备较好的稳定性和认证效率,可以满足中药材质量溯源系统的研究需要,研究结果为建立中药材质量溯源系统的标签安全机制提供了技术参考。
