基于NFC点对点模式的在线式服务安全协议设计

发布时间：2018-07-04 15:29

本文选题：NFC + 点对点模式　；参考：《天津大学》2016年硕士论文

【摘要】：当前许多大型服务器或基站都由人为进行控制。不同于小型终端,有线管理会造成繁琐,而无线管理虽然便捷,但由其本身的缺陷所带来的问题依然十分普遍。NFC作为新兴的近距离无线通信技术,可凭借超强的交互性与灵活性为上述管理提供便利。改进NFC点对点模式的通信协议,便能充分利用其优势。为完善目前NFC点对点模式本身的漏洞并引入其解决WLAN管理维护中现存的难题,本文设计出“基于NFC点对点模式的在线式服务安全协议”。采用着色Petri网进行理论建模,查找并论证安全风险的存在。通过融合多种已有的优秀算法,结合设备实际,给出全新的加密及认证方法,生成基于近场通信协议栈的安全隧道,并从算法复杂度的角度分析改进后协议的安全性。Linux环境下的测试运行结果表明,改进后的新协议一方面能够抵御针对近场通信的多种攻击方式,另一方面也对WLAN环境下的多种安全风险有良好的抵抗效果,稳健运行的同时更有着良好的应用前景。该协议极大地简化了维护过程,在安全上予以更高层次的保证,真正实现“碰一碰”即可完成交互的目标。
[Abstract]:At present, many large servers or base stations are artificially controlled. Unlike small terminals, cable management can be cumbersome, while wireless management is convenient, but the problems caused by its own shortcomings are still common as a new technology of close-range wireless communication. Can rely on super interactivity and flexibility to provide convenience for the above management. Improved NFC point-to-point communication protocol can make full use of its advantages. In order to perfect the vulnerabilities of the current NFC point-to-point mode and introduce it to solve the existing problems in WLAN management and maintenance, this paper designs an on-line service security protocol based on NFC point-to-point mode. The colored Petri net is used to model the theory to find and prove the existence of security risk. A new encryption and authentication method is proposed to generate a secure tunnel based on the near field communication protocol stack by merging many existing excellent algorithms and combining with the actual situation of the equipment. From the point of view of algorithm complexity, the test results of the improved protocol under Linux environment show that, on the one hand, the improved protocol can resist multiple attacks against near-field communication. On the other hand, it has good resistance effect to many kinds of security risks in WLAN environment, and has a good application prospect while running steadily. The protocol greatly simplifies the maintenance process and provides a higher level of security assurance.
【学位授予单位】：天津大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP301.1;TN925.93

【相似文献】