融合通信中安全机制的设计与实现

发布时间：2018-02-17 06:01

本文关键词： 安全协议形式化分析非对称加密　出处：《中国科学院大学(中国科学院沈阳计算技术研究所)》2017年硕士论文　论文类型：学位论文

【摘要】：安全协议是当前复杂网络环境下进行秘密信息交换的基础,其能否符合安全协议的安全属性要求,对于保障网络环境的健康极其重要。但是设计一个满足安全属性的安全协议十分不易,同时安全协议只有在经过严格的形式化分析,确保其正确的前提下才能投入使用。正是因为以上因素,阻碍了安全协议的进一步实现和大规模化应用。本文首先说明了网络通信中安全协议的重要性,之后介绍了密码学和安全协议制定过程中需要遵循的准则、常见的安全缺陷及其对应的应对措施等相关基础理论,对当前流行的形式化分析方法模态逻辑BAN逻辑的分析原理及其分析中需要使用的公理进行了说明。其次对本文中改进的NSSK安全协议的原生协议进行了分析,指明了原生协议存在的缺陷和不足,以及在改进和优化过程中所采取的防范措施,并通过优化后的形式化分析方法BAN逻辑对该改进的NSSK安全协议进行了理论分析,证明该改进的NSSK安全协议在理论上满足安全协议的安全属性要求,为下一步该安全协议的应用提供了理论依据。最后通过调用硬件TF加密卡提供的接口,在检测客户端环境参数、确认客户端可以使用加解密服务的前提下,在业务逻辑中调用相应的接口对改进的NSSK安全协议运行的各个步骤进行了实现,使得相互通信的双方在密钥分发中心的参与下能够得到共享会话密钥,并使用该共享会话密钥对文本、文件、语音、视频、文件消息进行加解密;使用共享会话密钥对IP电话中的媒体流进行加解密。之后,通过在商业软件上的测试,证明了改进的NSSK安全协议可以满足正常的商业需求,为该安全协议的进一步市场化提供依据。
[Abstract]:Security protocol is the basis of secret information exchange in the current complex network environment. It is very important to protect the health of the network environment. However, it is very difficult to design a security protocol that satisfies the security properties. At the same time, the security protocol can only be analyzed through strict formalization. It is precisely because of the above factors that the further realization and large-scale application of security protocols are hindered. This paper first explains the importance of security protocols in network communication. Then it introduces the relevant basic theories of cryptography and security protocol, such as the criteria to be followed, the common security defects and the corresponding countermeasures, and so on. In this paper, the analysis principle of modal logic BAN logic and the axioms that need to be used in the analysis are explained. Secondly, the native protocols of the improved NSSK security protocol in this paper are analyzed. The defects and shortcomings of the native protocol are pointed out, and the preventive measures taken in the process of improvement and optimization are pointed out. The improved NSSK security protocol is theoretically analyzed by the optimized formal analysis method BAN logic. It is proved that the improved NSSK security protocol meets the security attribute requirement of the security protocol theoretically, and provides the theoretical basis for the application of the security protocol in the next step. Finally, the interface provided by the hardware TF encryption card is called. On the premise of detecting the environment parameters of the client and confirming that the client can use the encryption and decryption service, the corresponding interface is called in the business logic to realize the steps of the improved NSSK security protocol. The shared session key can be obtained by the two parties communicating with each other with the participation of the key distribution center, and the text, file, voice, video and file messages are encrypted and decrypted using the shared session key; Using the shared session key to encrypt and decrypt the media stream in the IP phone. After testing on the commercial software, it is proved that the improved NSSK security protocol can meet the normal business needs. To provide the basis for the further marketization of the security agreement.
【学位授予单位】：中国科学院大学(中国科学院沈阳计算技术研究所)
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】