数据安全交换若干关键技术研究

发布时间：2018-03-15 03:17

本文选题：数据安全交换　切入点：流交换　出处：《北京交通大学》2016年博士论文　论文类型：学位论文

【摘要】：为了防止不同安全要求的网络、不同重要程度的信息系统之间恶意代码传播、信息泄露等安全风险的传递与扩散,通过网络隔离、安全分域控制等技术,为不同网络或不同信息系统之间构建起严格的保护和隔离壁垒；然而在实际的应用中这些隔离的网络或信息系统之间必然存在数据安全交换的需求。本文以实现不同网络或不同信息系统之间的数据交换、信息共享、控制风险传递、防止信息泄露为目标,针对目前数据安全交换中缺乏对交换行为的动态监管问题,研究交换进程行为可信分析与验证方法；针对大规模复杂网络环境下跨域流交换的安全性问题,研究基于代理重签名的跨域流安全交换技术。针对共享平台下交换数据流不可信问题,研究共享平台下动态可验证流安全交换技术。最终通过仿真试验和理论分析的手段评价和比较所设计机制与算法的性能,为数据安全交换的实现提供新理论、方法和技术支撑。本文的主要研究工作及创新点如下：(1)提出一种基于无干扰理论的交换进程行为可信性分析方法,为交换进程行为的动态管控提供理论依据。该方法将无干扰理论与可信计算的思想相结合,首先从交换进程的角度对交换行为进行形式化建模,然后根据数据安全交换的特点将对交换进程行为的分析分为两个阶段：单交换进程行为可信性分析阶段和多交换进程行为可信性分析阶段。分别给出不同阶段下交换进程行为可信的约束规则,交换进程行为可信性判定定理及安全证明。在多交换进程行为可信性分析的基础上进一步将多交换进程扩展为集中模式和分布式模式,并给出不同模式下交换进程行为可信的约束规则,交换进程行为可信性判定定理及安全证明。在以上理论研究的基础上,进一步提出一种网络环境下的交换进程行为可信性验证框架,并详细描述了网络环境下对交换进程行为进行验证的过程。最后以互联网电子政务中不同安全域间数据安全交换为背景,给出该方法的一个具体的应用实例,从而说明该方法的实用性和可用性。(2)提出一种用于流交换的基于陷门hash函数的代理重签名方案。首先,针对陷门hash函数在流交换应用中存在的密钥泄露问题,即当有多个用户对不同消息使用相同的陷门hash值时,可以从中推导出陷门密钥信息,提出一种新的基于椭圆曲线的无密钥泄露的陷门hash函数(EDL-MTH),并对其安全性加以证明,证明其满足有效计算性、陷门碰撞性、抗碰撞性、抗密钥泄露性和语义安全性；然后,基于EDL-MTH构造了一个在随机预言模型下可证明适应性选择消息攻击安全的代理重签名方案(MTH-PRS);最后,提出一个基于MTH-PRS的高效跨域流安全交换方案,并说明该方案在安全性方面和性能方面比传统的流交换方案有明显的提高。(3)提出一种基于双陷门hash认证树的动态可验证流安全交换方案。本文首先提出一种具有访问控制的动态可认证数据结构,该结构本质上是由任意的hash函数、双陷门hash函数和CP-ABE所组成的一种认证树(AC-MTAT),基于该认证树可以实现一种对数据流的动态可验证机制。接着,从整体上描述了AC-MTAT的构造结构和形式化定义。然后给出AC-MTAT的具体构建方法。与传统的MHT相比,AC-MTAT认证树无需提前确定叶子结点信息,能够在数据流增长和更新时实现对叶子结点的动态增加和更新。支持对流交换的实时验证和基于属性的细粒度验证,而且该认证树不仅能够对数据流的完整性进行验证,还能够对数据流的序列进行验证。此外,由于引入双陷门hash函数还可以将认证树的构建分为两个阶段：离线阶段和在线阶段,这样可以将构建认证树所需的主要代价放在离线阶段完成,大大提高了认证树的实时构建效率。更进一步,本文对AC-MTAT方案的正确性、可验证性、访问性进行了安全性证明,从理论上和实践上两个方面对方案的效率进行了分析。通过与现有方案的比较和分析,本文所提出的方案安全性更高,在数据流增加、更新和验证方面的效率也更高。最后,本文基于AC-MTAT提出一种共享平台下动态可验证流安全交换方案,并对方案的安全性进行了分析,从而较好解决了共享平台下动态流安全交换的问题。
[Abstract]:In order to prevent the safety requirements of different networks, different information systems of the importance of the spread of malicious code, information leaks and other security risk transfer and diffusion, through network isolation, security domain control technology, for different network or between different information system protection and strict isolation barriers; however, in the actual application among these isolated information system or network must have secure data exchange needs. In order to achieve different network or between different information systems data exchange, information sharing, risk control, prevent information leakage as the goal, aiming at secure data exchange in the absence of dynamic regulation of exchange behavior, study exchange process behavior trust analysis with the verification method for flow; exchanging security problem of cross domain large-scale complex network environment, the research of proxy re signature based on the cross Field flow safety switching technology. According to the data flow problem of trusted exchange and sharing platform, dynamic verification flow security technology research exchange sharing platform. The final performance by simulation experiments and theoretical analysis method to evaluate and compare the design mechanism and algorithm for data security, to provide a new theory for the method and technical support. The main research work and innovations are as follows: (1) proposed an analysis method of exchange process without the interference theory of behavior based on credibility, and provide a theoretical basis for the dynamic control process of exchange behavior. The method without interference theory and combining the idea of trusted computing, first from the exchange process perspective on the exchange behavior formal modeling, and then according to the characteristics of data security exchange to exchange process behavior analysis is divided into two stages: the stage of process behavior credibility analysis and single exchange Process behavior credibility analysis stage. Many exchange are given under different stages of exchange process behavior rules credible, exchange process behavior credibility theorem and safety proof. Based on the credibility analysis of multi exchange process behavior further the exchange process for the expansion of centralized and distributed mode, and gives the process behavior constraint credible exchange under the mode of exchange process behavior credibility theorem and security proof. Based on the above theoretical research, further put forward the credibility of the exchange process validation framework in a network environment, and a detailed description of the process under the network environment to verify the exchange process behavior. Finally to data security Internet electronic exchange between different security domains in the background, a specific application example of the proposed method are given to illustrate the usefulness of the method And availability. (2) proposes a method for the flow exchange of proxy re signature scheme based on trapdoor hash function. Firstly, the trapdoor function in hash flow exchange key leakage problem existing in the application, i.e. when there are multiple users on the same message in different trapdoor hash value, from derive the trapdoor key information, put forward a new trapdoor hash function based on elliptic curve secret keys (EDL-MTH), and its security is proved and verified to satisfy the effective calculation, trapdoor collision, collision resistance, anti leakage of the key and then the language of Yi An; EDL-MTH constructed a proof in the random oracle model can be adaptively chosen message attack security proxy re signature scheme based on (MTH-PRS); finally, based on the efficient cross domain security exchange flow scheme of MTH-PRS, and a description of the scheme in terms of safety and performance Compared with the traditional flow exchange scheme is improved obviously. (3) proposed an exchange scheme verification flow security dynamic double trapdoor hash tree based authentication. This paper proposes a dynamic access control authentication data structure, the structure is essentially arbitrary hash function, in a double certification tree gate hash function and the CP-ABE component (AC-MTAT), the authentication tree can achieve a kind of data flow dynamic authentication based on. Then, from the overall description of the structure and the formal definition of AC-MTAT. The specific construction method and AC-MTAT are given. Compared with the traditional MHT, AC-MTAT authentication tree to determine the leaf node information in advance, can flow growth and update data when added and updated dynamically on the leaf nodes. Real time verification and support exchange based on fine-grained authentication attribute, and the authentication tree can not only To verify the integrity of the data flow, but also can verify the serial data stream. In addition, due to the introduction of double trapdoor hash function can also be constructed authentication tree is divided into two stages: off-line and on-line stages, which can be mainly at the cost of building the required authentication tree on the off-line stage. Can greatly improve the efficiency of constructing real-time authentication tree. Further, the correctness of the AC-MTAT scheme, verification, access to the security proof is analyzed from two aspects of theory and Practice on the efficiency of the scheme. Through analysis and comparison with the existing schemes, the scheme of security the higher flow increases in data, update and validate the higher efficiency. Finally, this paper proposes a sharing platform based on AC-MTAT dynamic verification flow security exchange scheme, and the security of the scheme are analyzed. The problem of dynamic flow security exchange under shared platform is solved.

【学位授予单位】：北京交通大学
【学位级别】：博士
【学位授予年份】：2016
【分类号】：TP309

【相似文献】