基于位置的移动终端访问控制模型设计与研究

发布时间：2018-06-28 18:31

本文选题：访问控制 + 位置　；参考：《江苏科技大学》2014年硕士论文

【摘要】：移动终端逐渐成为人们的日常生活和工作中不可或缺的一部分，越来越多的移动终端接入互联网，，网络资源的共享跨越了时空的限制，信息安全问题暴露的越来越多。随着人们消费观念的改变，位置信息逐渐成为信息共享的对象，位置信息的泄露不仅能使黑客窃取用户的位置，并伪造用户的位置获得基于位置的服务，甚至篡改用户的位置信息对系统发动攻击。这些问题都导致了安全信息的泄露，人们对能够根据用户的位置信息进行访问控制的技术产生了强烈的需求。本文介绍了基于位置的访问控制模型(LBAC)，针对LBAC模型在移动终端领域应用存在的位置安全问题，引入可信计算技术，提出了基于可信位置的访问控制模型(TLBAC)，由可信计算模块和可信位置通信获得可信位置，从源头上解决了位置信息的安全问题和位置的欺骗攻击。并根据现实环境中位置安全级别的动态性，引入时间限制因素，提出了基于时间限制的位置访问控制模型(tLBAC)，解决位置安全级别“一定终身”的约束，实现位置安全级别在不同时间的动态变化，访问控制受位置安全级别的动态变化的约束不仅增强了系统安全性，还提高了位置的利用率。最后，本文在SOPC平台上，为μC/OS-II操作系统分别增加了三个访问控制模型，实现了μC/OS-II多级安全访问控制，并对三个模型进行了验证和测试。本文模型在LBS、军事和农业等领域的移动终端具有广泛的应用价值。
[Abstract]:Mobile terminals have gradually become an indispensable part of people's daily life and work. More and more mobile terminals are connected to the Internet. The sharing of network resources transcends the limitation of time and space, and more information security problems are exposed. With the change of people's consumption concept, location information gradually becomes the object of information sharing. The leak of location information can not only make hackers steal the location of users, but also forge the location of users to obtain location-based services. Even tampering with the user's location information to launch an attack on the system. These problems lead to the disclosure of security information, and there is a strong demand for the technology of access control based on the user's location information. This paper introduces a location-based access control model (LBAC). Aiming at the location security problem in the application of LBAC model in mobile terminal field, the trusted computing technology is introduced. A trusted location-based access control model (TLBAC) is proposed to obtain trusted location from trusted computing module and trusted location communication. It solves the security problem of location information and spoofing attack of location from source. According to the dynamic nature of the location security level in the real environment, this paper introduces the time limit factor, and puts forward the location access control model (tLBAC) based on the time limit, which solves the "one fixed lifetime" constraint of the location security level. The dynamic change of location security level is realized at different time. Access control is constrained by dynamic change of location security level, which not only enhances system security, but also improves the utilization rate of location. Finally, this paper adds three access control models to 渭 C / OS-II operating system on SOPC platform, implements 渭 C / OS-II multi-level secure access control, and verifies and tests the three models. This model has wide application value in LBS, military and agricultural mobile terminals.
【学位授予单位】：江苏科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】