System-wide information management(SWIM)is a complex distributed information transfer and sharing system for the next generation of Air Transportation System(ATS).In response to the growing volume of civil aviation ai...System-wide information management(SWIM)is a complex distributed information transfer and sharing system for the next generation of Air Transportation System(ATS).In response to the growing volume of civil aviation air operations,users accessing different authentication domains in the SWIM system have problems with the validity,security,and privacy of SWIM-shared data.In order to solve these problems,this paper proposes a SWIM crossdomain authentication scheme based on a consistent hashing algorithm on consortium blockchain and designs a blockchain certificate format for SWIM cross-domain authentication.The scheme uses a consistent hash algorithm with virtual nodes in combination with a cluster of authentication centers in the SWIM consortium blockchain architecture to synchronize the user’s authentication mapping relationships between authentication domains.The virtual authentication nodes are mapped separately using different services provided by SWIM to guarantee the partitioning of the consistent hash ring on the consortium blockchain.According to the dynamic change of user’s authentication requests,the nodes of virtual service authentication can be added and deleted to realize the dynamic load balancing of cross-domain authentication of different services.Security analysis shows that this protocol can resist network attacks such as man-in-the-middle attacks,replay attacks,and Sybil attacks.Experiments show that this scheme can reduce the redundant authentication operations of identity information and solve the problems of traditional cross-domain authentication with single-point collapse,difficulty in expansion,and uneven load.At the same time,it has better security of information storage and can realize the cross-domain authentication requirements of SWIM users with low communication costs and system overhead.KEYWORDS System-wide information management(SWIM);consortium blockchain;consistent hash;cross-domain authentication;load balancing.展开更多
广域信息管理(System Wide Information Management,SWIM)是"航空云(Aeronautical Cloud)"的基础设施,用于航空交通运输相关信息的传输与共享。SWIM系统的可靠性和生存能力对航空交通运输的安全运行具有重大影响。设计了面向S...广域信息管理(System Wide Information Management,SWIM)是"航空云(Aeronautical Cloud)"的基础设施,用于航空交通运输相关信息的传输与共享。SWIM系统的可靠性和生存能力对航空交通运输的安全运行具有重大影响。设计了面向SWIM系统生存能力的弹性灾难恢复方案。该方案采用Linux虚拟服务的组织架构,改进了Linux虚拟服务中的加权最小连接WLC(Weighted Least-Connection)调度算法,提高了SWIM服务的连续性。实验结果表明,改进后的加权最小连接算法可以有效提升SWIM系统的灾难恢复能力,满足SWIM系统的弹性灾难恢复需求。展开更多
随着民航业信息化建设的不断推广和深入,民航各业务系统之间高效的信息共享和资源交互成为民航业进一步发展的关键.广域信息管理系统(system wide information management,SWIM)作为全球性空中交通管理平台,正是针对上述问题提出广泛性...随着民航业信息化建设的不断推广和深入,民航各业务系统之间高效的信息共享和资源交互成为民航业进一步发展的关键.广域信息管理系统(system wide information management,SWIM)作为全球性空中交通管理平台,正是针对上述问题提出广泛性适用的解决思路.在SWIM进行数据交互的同时,许多重要数据和敏感信息也被暴露出来,成为黑客恶意入侵的目标,SWIM面临较大的信息安全隐患.首先介绍了SWIM的研究现状,接着从功能角度介绍了SWIM的概念架构,并逐层研究了SWIM面临的主要安全隐患,同时有针对性地设计了安全防护框架,从防护技术和安全管理2个角度提出了应对措施.展开更多
为了解决广域信息管理(system wide information management,SWIM)信息安全问题,根据SWIM面向服务的系统架构(service-oriented architecture,SOA)的特点,设计SWIM的访问策略,提出了一种基于属性密码(attribute-based encryption,ABE)...为了解决广域信息管理(system wide information management,SWIM)信息安全问题,根据SWIM面向服务的系统架构(service-oriented architecture,SOA)的特点,设计SWIM的访问策略,提出了一种基于属性密码(attribute-based encryption,ABE)的授权方法.该方法根据SWIM访问结构中分布性、异构性和动态性的特点,采用密文访问策略(cipher policy-attribute based encryption,CP-ABE)实现.在模拟环境中对该方法进行仿真实验和安全性分析,实验结果表明:该方法支持SWIM航空用户细粒度的授权,降低了SWIM授权管理的复杂度,提高了SWIM系统的安全性.展开更多
基金funded by the National Natural Science Foundation of China(62172418)the Joint Funds of the National Natural Science Foundation of China and the Civil Aviation Administration of China(U2133203)+1 种基金the Education Commission Scientific Research Project of Tianjin China(2022KJ081)the Open Fund of Key Laboratory of Civil Aircraft Airworthiness Technology(SH2021111907).
文摘System-wide information management(SWIM)is a complex distributed information transfer and sharing system for the next generation of Air Transportation System(ATS).In response to the growing volume of civil aviation air operations,users accessing different authentication domains in the SWIM system have problems with the validity,security,and privacy of SWIM-shared data.In order to solve these problems,this paper proposes a SWIM crossdomain authentication scheme based on a consistent hashing algorithm on consortium blockchain and designs a blockchain certificate format for SWIM cross-domain authentication.The scheme uses a consistent hash algorithm with virtual nodes in combination with a cluster of authentication centers in the SWIM consortium blockchain architecture to synchronize the user’s authentication mapping relationships between authentication domains.The virtual authentication nodes are mapped separately using different services provided by SWIM to guarantee the partitioning of the consistent hash ring on the consortium blockchain.According to the dynamic change of user’s authentication requests,the nodes of virtual service authentication can be added and deleted to realize the dynamic load balancing of cross-domain authentication of different services.Security analysis shows that this protocol can resist network attacks such as man-in-the-middle attacks,replay attacks,and Sybil attacks.Experiments show that this scheme can reduce the redundant authentication operations of identity information and solve the problems of traditional cross-domain authentication with single-point collapse,difficulty in expansion,and uneven load.At the same time,it has better security of information storage and can realize the cross-domain authentication requirements of SWIM users with low communication costs and system overhead.KEYWORDS System-wide information management(SWIM);consortium blockchain;consistent hash;cross-domain authentication;load balancing.
文摘随着民航业信息化建设的不断推广和深入,民航各业务系统之间高效的信息共享和资源交互成为民航业进一步发展的关键.广域信息管理系统(system wide information management,SWIM)作为全球性空中交通管理平台,正是针对上述问题提出广泛性适用的解决思路.在SWIM进行数据交互的同时,许多重要数据和敏感信息也被暴露出来,成为黑客恶意入侵的目标,SWIM面临较大的信息安全隐患.首先介绍了SWIM的研究现状,接着从功能角度介绍了SWIM的概念架构,并逐层研究了SWIM面临的主要安全隐患,同时有针对性地设计了安全防护框架,从防护技术和安全管理2个角度提出了应对措施.
文摘为了解决广域信息管理(system wide information management,SWIM)信息安全问题,根据SWIM面向服务的系统架构(service-oriented architecture,SOA)的特点,设计SWIM的访问策略,提出了一种基于属性密码(attribute-based encryption,ABE)的授权方法.该方法根据SWIM访问结构中分布性、异构性和动态性的特点,采用密文访问策略(cipher policy-attribute based encryption,CP-ABE)实现.在模拟环境中对该方法进行仿真实验和安全性分析,实验结果表明:该方法支持SWIM航空用户细粒度的授权,降低了SWIM授权管理的复杂度,提高了SWIM系统的安全性.
