EPCglobal网络中安全高效的发现服务的设计与实现
发布时间：2018-10-31 07:41
【摘要】：EPCglobal网络是个基于无线射频识别技术（RFID）的物联网的 个实现体系。为了能够跨企业获取并利用物品的所有相关数据，EPCglobal网络提出需要个发现服务，能够通过物品唯标识码获取相关未知数据源的地址。然而由于企业信息的机密性，发现服务中地址信息的读写操作必须具备完善的访问控制机制，企业才会愿意向发现服务发布自己的数据源地址。又由于企业在生产和物流等过程中需要即时性地为每个物品向发现服务发布地址记录，因此发现服务的服务性能要足够高效。目前对发现服务的研究缺乏有效可用的访问控制机制，同时缺乏有效的机制保证高效的服务。 本文主要做了以下三方面的贡献。第，针对发现服务的应用场景，设计了套基于P-Token的单品级动态访问控制机制。其中每个物品的P-Token随着物品的生产而被初始化，存储在RFID的User Bank中，并顺着供应链流通。只有拥有该物品的有效P-Token才能向发现服务发布地址记录或更新P-Token，只有提供发布地址记录时的P-Token或提供物品的当前有效P-Token才能看见该地址记录。同时采用非对称加密算法保证P-Token在供应链传输过程中以及和发现服务的通信过程中的真实性、完整性和机密性。第二，针对发现服务的海量数据需求和高性能服务需求，提出了个分布式内存数据存储体系。在分布式哈希表(DHT)的基础上，通过虚拟分区划分数据归属权，每个结点会将属于自己的数据直接存储在内存中，保证数据高效的读写操作。通过备份调度机制，在数据备份缓冲区满了或者计时器到时的时候异步地将数据备份到其他结点上保证数据的安全性。通过持久化调度机制，在内存空间到达阈值或者未被访问时间过长时异步地将内存中的数据写入到持久层去，维持内存空间的可用性，同时通过可扩展的数据持久化通道实现了与传统存储技术的对接。第三，为了进步满足发现服务的高性能服务需求，实现了个基于二进制编码的高效数据通信体系。通过应用GoogleProtocol Buffers技术，有效地将需要传输的数据进行二进制编码压缩，，减少了数据的传输量，提高了消息数据的传输效率，同时保持了对所传输的消息读写的语言无关性和平台中立性。 本文首先对研究背景和研究现状进行了介绍与总结，识别了目前对发现服务的研究的不足之处，并提出了本文的研究内容与技术路线；然后分别从基于P-Token的安全机制、基于内存存储的分布式存储机制以及基于二进制编码的高效数据通信机制等三个方面对系统进行研究与设计；并将整个系统分为系统通信层、系统服务层、数据存储层以及数据持久层等四层架构，详细描述了系统的实现；最后对全文进行了总结，同时对未来的进步工作进行了展望。
[Abstract]:EPCglobal network is a realization system of Internet of things based on RFID technology (RFID). In order to obtain and utilize all the relevant data of goods across enterprises, EPCglobal network proposes the need for a discovery service, which can obtain the address of the relevant unknown data source through the object-only identification code. However, due to the confidentiality of the enterprise information, the read-write operation of address information in the discovery service must have a perfect access control mechanism so that the enterprise will be willing to publish its own data source address to the discovery service. Because enterprises need to publish the address record to the discovery service instantly in the process of production and logistics, the service performance of the discovery service should be efficient enough. At present, the research on discovery services lacks effective access control mechanisms and efficient services. This paper mainly makes the following three contributions. Firstly, a single level dynamic access control mechanism based on P-Token is designed for the application scenario of discovery service. The P-Token of each item is initialized as the item is produced, stored in the User Bank of the RFID and circulated along the supply chain. Only the valid P-Token that owns the item can publish the address record or update P-Tokento the discovery service, and only the P-Token at the time of the publication address record or the current valid P-Token of the item can see the address record. At the same time, asymmetric encryption algorithm is used to ensure the authenticity, integrity and confidentiality of P-Token in the process of supply chain transmission and communication with discovery services. Secondly, a distributed memory data storage system is proposed to meet the demand of massive data and high performance service. Based on the distributed hash table (DHT), each node stores its own data directly in memory through virtual partitioning, which ensures the efficient reading and writing operation of the data. By means of backup scheduling mechanism, the data can be backed up asynchronously to other nodes when the data backup buffer is full or when the timer arrives. Through the persistence scheduling mechanism, the data in memory is written asynchronously to the persistence layer when the memory reaches threshold or is not accessed too long, so as to maintain the availability of memory space. At the same time, the docking with the traditional storage technology is realized through the extensible data persistence channel. Thirdly, in order to meet the requirement of high performance service of discovery service, an efficient data communication system based on binary coding is implemented. By using GoogleProtocol Buffers technology, the data that needs to be transmitted is effectively compressed by binary coding, which reduces the amount of data transmission and improves the transmission efficiency of message data. At the same time, the language independence and platform neutrality of the transmitted messages are maintained. Firstly, this paper introduces and summarizes the research background and status quo, identifies the shortcomings of the current research on discovery services, and puts forward the research content and technical route of this paper. Then the system is researched and designed from three aspects: the security mechanism based on P-Token, the distributed storage mechanism based on memory storage and the efficient data communication mechanism based on binary coding. The whole system is divided into four layers: system communication layer, system service layer, data storage layer and data persistence layer. The implementation of the system is described in detail.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP391.44;TN915.08
本文编号：2301414
[Abstract]:EPCglobal network is a realization system of Internet of things based on RFID technology (RFID). In order to obtain and utilize all the relevant data of goods across enterprises, EPCglobal network proposes the need for a discovery service, which can obtain the address of the relevant unknown data source through the object-only identification code. However, due to the confidentiality of the enterprise information, the read-write operation of address information in the discovery service must have a perfect access control mechanism so that the enterprise will be willing to publish its own data source address to the discovery service. Because enterprises need to publish the address record to the discovery service instantly in the process of production and logistics, the service performance of the discovery service should be efficient enough. At present, the research on discovery services lacks effective access control mechanisms and efficient services. This paper mainly makes the following three contributions. Firstly, a single level dynamic access control mechanism based on P-Token is designed for the application scenario of discovery service. The P-Token of each item is initialized as the item is produced, stored in the User Bank of the RFID and circulated along the supply chain. Only the valid P-Token that owns the item can publish the address record or update P-Tokento the discovery service, and only the P-Token at the time of the publication address record or the current valid P-Token of the item can see the address record. At the same time, asymmetric encryption algorithm is used to ensure the authenticity, integrity and confidentiality of P-Token in the process of supply chain transmission and communication with discovery services. Secondly, a distributed memory data storage system is proposed to meet the demand of massive data and high performance service. Based on the distributed hash table (DHT), each node stores its own data directly in memory through virtual partitioning, which ensures the efficient reading and writing operation of the data. By means of backup scheduling mechanism, the data can be backed up asynchronously to other nodes when the data backup buffer is full or when the timer arrives. Through the persistence scheduling mechanism, the data in memory is written asynchronously to the persistence layer when the memory reaches threshold or is not accessed too long, so as to maintain the availability of memory space. At the same time, the docking with the traditional storage technology is realized through the extensible data persistence channel. Thirdly, in order to meet the requirement of high performance service of discovery service, an efficient data communication system based on binary coding is implemented. By using GoogleProtocol Buffers technology, the data that needs to be transmitted is effectively compressed by binary coding, which reduces the amount of data transmission and improves the transmission efficiency of message data. At the same time, the language independence and platform neutrality of the transmitted messages are maintained. Firstly, this paper introduces and summarizes the research background and status quo, identifies the shortcomings of the current research on discovery services, and puts forward the research content and technical route of this paper. Then the system is researched and designed from three aspects: the security mechanism based on P-Token, the distributed storage mechanism based on memory storage and the efficient data communication mechanism based on binary coding. The whole system is divided into four layers: system communication layer, system service layer, data storage layer and data persistence layer. The implementation of the system is described in detail.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP391.44;TN915.08
【参考文献】
相关期刊论文 前1条
1 赵文;李信鹏;刘殿兴;张世琨;王立福;;供应链环境下一种分布式RFID发现服务[J];电子学报;2010年S1期
本文编号：2301414
本文链接：https://www.wllwen.com/guanlilunwen/gongyinglianguanli/2301414.html
