一种适于远程医疗的批量认证方案

发布时间：2018-04-13 02:17

本文选题：远程医疗 + 批量认证　；参考：《电子科技大学》2014年硕士论文

【摘要】：远程医疗(Telemedicine)是21世纪新型医疗模式,利用远程通信技术和信息技术,为医疗条件落后的地区提供远距离医学信息和服务,病人无需长途跋涉就能接受专业医师的诊断。由于敏感的医疗隐私保护、大量的数据交换及便携式医疗设备计算资源限制,远程医疗通信对快速认证和加密解密有严格的要求。本文从远程医疗应用模型中提取出身份认证的密码学成分,构建了一个更安全高效的批量认证方案(SEBAPTM),满足信息完整性、认证性、保密性、不可否认性、抗伪造攻击和抗DoS攻击。实验评估数据显示,相对于基于标准DSA的批量认证方案UBAPV2G,SEBAPTM具有更高的签字效率、更低的认证延迟和较强的抗击DoS攻击的能力,特别适于实时通信及处理能力、存储资源和网络带宽受限的环境中。具体研究成果如下:1.在保证安全性的前提下,最大限度地改善算法中可以提升计算效率的地方,即在签字计算中,使用模乘运算替代模逆运算,得到了更高签字效率的签字算法SEBAP。2.SEBAP改进了一种DSA变种的签字计算,填补了存在的伪造攻击;而对于UBAPV2G存在的伪造攻击,本文采用“双buffer”结构设计,使得这类伪造攻击变得不可能。3.使用包过滤机制抵御DoS攻击,即利用不相交集合的算法思想分类数据包,再以批处理方式对集合进行整包处理而不是耗时的One-by-One处理,进而减少批量认证算法进行递归运算,有效地抗击了DoS攻击。另外,包过滤机制对腐败数据有过滤作用,对伪造签字攻击有很强的抵御力。4.对SEBAPTM批量认证方案进行实测评估。评估结果显示,SEBAP签字开销约为DSA的87.4%;SEBAPTM批处理方案的认证延迟时间约占One-by-One的64.2%;在DoS攻击下,启用包过滤机制的认证延迟时间约为未启用包过滤机制的52.7%,包过滤机制对抗击DoS攻击和伪造攻击均有积极作用。
[Abstract]:Telemedicine (Telemedicine) is a new medical model in the 21st century. Telemedicine provides telemedicine information and services for medical areas with poor medical conditions by using remote communication technology and information technology. Patients can be diagnosed by professional doctors without having to travel long distances.Due to sensitive medical privacy protection, a large number of data exchange and portable medical equipment computing resource constraints, telemedicine communication has strict requirements for fast authentication and encryption and decryption.In this paper, the cryptographic components of identity authentication are extracted from the telemedicine application model, and a more secure and efficient batch authentication scheme is constructed to satisfy the information integrity, authentication, confidentiality, non-repudiation, anti-counterfeiting attack and anti- attack.The experimental results show that compared with the standard DSA based batch authentication scheme, UBAPV2G / SEBAPTM has higher signature efficiency, lower authentication delay and stronger ability to resist DoS attacks. It is especially suitable for real-time communication and processing.Storage resources and network bandwidth constraints in the environment.Specific research results are as follows: 1.On the premise of ensuring security, the algorithm can improve the calculation efficiency to the maximum extent, that is, in signature calculation, the modular multiplication operation is used to replace the modular inversion operation.SEBAP.2.SEBAP, a signature algorithm with higher signature efficiency, improves the signature calculation of a DSA variant to fill in the forgery attack that exists, while for the forgery attack existing in UBAPV2G, this paper adopts the "double buffer" structure design.Make this forgery attack impossible.Packet filtering mechanism is used to resist DoS attack, that is, the algorithm of disjoint set is used to classify data packets, and then the whole packet is processed by batch processing instead of time-consuming One-by-One processing, and then the recursive operation of batch authentication algorithm is reduced.Effectively resisted the DoS attack.In addition, packet filtering mechanism can filter corrupt data and resist forgery signature attack.The SEBAPTM batch certification scheme is evaluated.The results show that the signature cost of SEBAP is about 87.4% of DSA. The authentication delay time of SEBAPTM batch processing scheme accounts for 64.2% of One-by-One.The delay time of authentication with packet filtering mechanism enabled is about 52.7 when packet filtering mechanism is not enabled. Packet filtering mechanism plays a positive role in resisting DoS attack and forgery attack.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.91

【相似文献】