基于多组件签名的远程证明协议*

为了解决现有的远程证明方案对于多个安全组件同时证明时效率不高的问题,提出了一个基于多组件签名的远程证明方案,提供了使用属性签名来构造远程证明协议的思路。这种远程证明方案利用属性密码的签名协议进行构造,能够同时使用多个组件对消息进行签名,结合了属性密码学中的属性签名匿名性的特点,可以更好地保护证明平台的配置信息。对于具有不同安全性要求的消息有相应的签名组件,实现了动态证明。实现的原型系统表明,该方案能够同时对多个组件进行签名,且效率较高,基本不会影响平台的正常运行。     

高效的基于属性的环签名方案

提出了两个新的高效的基于属性的环签名方案,签名者用其部分描述属性签署消息,所有拥有这些签名属性的用户组成一个环,环以外的成员不能伪造签名,并分别在随机预言模型和标准模型下证明其能抵抗签名伪造攻击.匿名性方面,对有相同签名属性集的用户是匿名的,对属性管理中心也是匿名的.由于基于属性的环签名不需要知道环成员的公钥,因此与以往提出的基于身份环签名相比较,提出的签名方案具有更加便捷、更加灵活的特点;与现有的基于属性的环签名相比,签名长度减少了1/3,验证所需的双线性对减少了1/3,因此新方案在签名长度、运算效率等方面都有明显优势.同时基于属性的环签名在匿名认证和基于属性的通信系统中有很重要的应用.     

改进的群签名策略隐藏方案

针对CP-ABE方案在解密阶段中存在访问策略可能泄露隐私的问题,提出了一种改进的群签名策略隐藏方案。首先,通过权重门限访问结构构建属性集合,在安全模型中对属性集合分割确定挑战者和敌对手的属性集合。然后,应用群签名方法实现访问策略的隐藏。最后,构建改进的策略隐藏方案的算法,对方案的安全性进行证明。通过对比分析,证明了提出的改进群签名策略隐藏方案在保护用户隐私的同时,适用范围更广泛。     

基于可截取签名和属性加密的云存储访问控制方案

现有的云存储访问控制方案只能根据用户属性的不同发送不同的消息,因而消息利用率不高。针对这一缺陷,首先设计了一个基于ElGamal的可截取签名方案,然后基于该可截取签名方案结合属性加密体制提出了一种新的云存储访问控制方案。新方案在实现数据加密的同时,提供了细粒度的访问控制,将符合属性的子消息发送给相应的用户,提高了消息的利用率,具有更强的应用性。     

一种基于BB+签名的PBA方案

在可信计算环境中,为了弥补原有可信计算组织(TCG)提出的二进制证明方案的缺陷,提出了一种新型的基于属性的证明(Property-Based Attestation,PBA)方案。首先介绍了基于属性的证明思想及其安全模型;然后基于改进的BB+签名技术给出了一个具体的基于属性的证明构造方案,并与其他方案在性能上进行了比较;最后在随机预言模型下证明了该方案具有配置隐私及不可伪造等安全性。     

一种强不可伪造代理重签名方案

已有的代理重签名方案大多是存在性不可伪造的,攻击者能对已经签名过的消息重新伪造一个有效的签名,但强不可伪造性能阻止攻击者对已经签名过的消息签名对进行重新伪造。为此,利用目标抗碰撞(TCR)杂凑函数,提出一种双向代理重签名方案。基于TCR杂凑函数的抗碰撞性和计算性Diffie-Hellman假设,证明方案在适应性选择消息攻击下是强不可伪造的。分析结果表明,该方案在计算效率上优于现有的强不可伪造代理重签名方案,系统公开参数长度、签名长度和重签名长度更短,且满足更多的安全属性。     

常量密文基于属性的门限签密方案

针对现有的基于属性的签密方案密文长度会随属性数量的增长而增长导致通信量低下的问题,提出了一个常量密文基于属性的门限签密方案。签密者（发送方）签密一段消息给解签密者（接收方）。接收方能成功解密当且仅当接收方的属性集合与发送方所用的加密属性集合的交集元素的个数大于k,接收方能确定签名是来自发送方当且仅当发送方的属性集合和发送方签名属性集合的交集元素的个数大于t,其中k,t都是门限值。该方案结合了基于属性的加密和签名,并提供了保密性、真实性、不可伪造和抗合谋攻击。和现有的方案相比,该方案实现了常量密文,具有更好的效率。     

基于模糊属性的广播签名算法

基于双线性映射与多序列DHE假设,提出了一种基于模糊属性的广播签名算法。在基于模糊属性的签名方案中,对消息签名的属性集S与验证此签名的属性集W必须满足条件｜S∩W｜≥t,t是门限值,在过去的签名方案中,t的值是预先设定不变的;而在文中提出的算法中,门限t值可以根据不同的需要而动态地设定。在计算量方面,设每组最多有m个用户,则验证签名所要计算的双线性对为m＋1个,降低了对用户计算能力的要求。此外本算法可以实现固定大小的密钥及密文,这有利于提高安全传输的性能。     

适用于移动网络的属性基在线/离线签密方案

签密能够同时实现加密和签名的功能,并且代价小于传统方法。在线/离线技术能够有效提高签名与加密效率,适用于计算能力严格受限的移动网络终端设备。针对现有的属性签密方案实用性不强、效率低下的现状,提出了一个基于属性的在线/离线签密方案,在随机预言机模型下,利用判定双线性Diffie-Hellman倒转(l-DBDHI)问题和计算Diffie-Hellman(CDH)问题的困难性,证明了该方案满足在适应性选择密文攻击下的不可区分性以及适应性选择消息下的不可伪造性。基于属性的在线/离线签密方案虽然在密文长度方面有所增加,但该方案既可以支持保密性和认证性,又更加贴近于实际环境。     

一个可追踪身份的门限属性签名方案

在基于属性的签名中, 签名者的身份是由一系列属性组成的集合来表示且满足匿名性, 但同时签名者也可以利用这一特性滥用签名。提出了一个可追踪身份的门限属性签名方案, 它利用PKG生成的追踪密钥和比特加密的非交互证据不可区分证明, 实现了属性签名的可追踪性和不可联系性。方案的安全性基于计算性Diffie-Hellman假设, 与现有方案相比, 公钥长度、私钥长度和签名运算量明显减少, 适用于通信网络带宽受限的环境。     

煤矿井下安全监控分站的设计及其仿真实现

为了设计一种具有低成本、低功耗、易操作、功能强且可靠性高的煤矿井下安全分站,针对煤矿安全生产实际,文章提出了采用MCS-51系列单片机为核心、具有CAN总线通信接口的煤矿井下安全监控分站的设计方案;首先给出煤矿井下安全监控分站的整体构架设计,然后着重阐述模拟量输入信号处理系统的设计过程,最后说明单片机最小系统及其键盘、显示、报警、通信等各个组成部分的设计;为验证设计方案的可行性与有效性,使用Proteus软件对设计内容进行仿真验证,设计的煤矿井下安全监控分站具有瓦斯、温度等模拟量参数超标报警功能和电机开停、风门开闭等开关量指示功能;仿真结果表明:设计的煤矿井下安全监控分站具有一定的实际应用价值.     

View-based model-driven architecture for enhancing maintainability of data access services

In modern service-oriented architectures, database access is done by a special type of services, the so-called data access services (DAS). Though, particularly in data-intensive applications, using and developing DAS are very common today, the link between the DAS and their implementation, e.g. a layer of data access objects (DAOs) encapsulating the database queries, still is not sufficiently elaborated, yet. As a result, as the number of DAS grows, finding the desired DAS for reuse and/or associated documentation can become an impossible task. In this paper we focus on bridging this gap between the DAS and their implementation by presenting a view-based, model-driven data access architecture (VMDA) managing models of the DAS, DAOs and database queries in a queryable manner. Our models support tailored views of different stakeholders and are scalable with all types of DAS implementations. In this paper we show that our view-based and model driven architecture approach can enhance software development productivity and maintainability by improving DAS documentation. Moreover, our VMDA opens a wide range of applications such as evaluating DAS usage for DAS performance optimization. Furthermore, we provide tool support and illustrate the applicability of our VMDA in a large-scale case study. Finally, we quantitatively prove that our approach performs with acceptable response times.     

A pragmatic multi-method investigation of discrepant technological events: Coping,attributions, and ‘accidental’ learning

Discrepant technological events or situations that entail a problem, a misunderstanding or a difficulty with the Information Technology (IT) being employed, are common in the workplace, and can lead to frustration and avoidance behaviors. Little is known, however, about how individuals cope with these events. This paper examines these events by using a multi-method pragmatic approach informed by coping theory. The results of two studies – a critical incident study and an experiment – serve to build and test, respectively, a theoretical model that posits that individuals use a variety of strategies when dealing with these events: they experience negative emotions, make external attributions, and adopt engagement coping strategies directed at solving the event, eventually switching to a disengagement coping strategy when they feel they have no control over the situation. Furthermore, users’ efforts may result in ‘accidental’ learning as they try to overcome the discrepant IT events through engagement coping. The paper ends with a discussion of the results in light of existing literature, future opportunities for research, and implications for practice.     

The Distributed Time-Triggered Simulation Scheme: Core Principles and Supporting Execution Engine

Distributed real-time simulation is a young technology field but its practice is under increasing demands. In recent years the author and his collaborators have been establishing a new approach called the distributed time-triggered simulation (DTS) scheme which is conceptually simple and easy to use but widely applicable. The concept was initiated in the course of developing a new-generation object-oriented real-time programming scheme called the time-triggered message-triggered object (TMO) programming scheme. Some fundamental issues inherent in distributed real-time simulation that were learned during recent experimental studies are discussed along with some approaches for resolving the issues. An execution engine developed to support both the TMOs engaged in control computation and the TMOs engaged in DTS is also discussed along with its possible extensions that will enable significantly larger-scale DTSs.     

Software-Konfigurationsmanagement in großen Softwareprojekten

Zusammenfassung Mit zunehmender Größe der Softwaresysteme verschärfen sich die für die Software-Herstellung typischen Probleme: Beherrschen großer Objektmengen, Erhalten der Systemkonsistenz, Kontrolle der ständigen Änderungseinflüsse und Gewährleisten einer langen Lebensdauer. Die Disziplin Konfigurationsmanagement bildet den methodischen Ansatz, diese Probleme besser zu beherrschen. Software-Konfigurationsmanagement faßt die Herstellung von Softwaresystemen als eine Abfolge von kontrollierten Änderungen an gesicherten Zwischen- und Endergebnissen auf. Dargestellt werden die Objekte und Funktionen des Software-Konfigurationsmanagements sowie die hierfür in großen Software-Projekten benötigten Methoden, Instanzen und Hilfsmittel.     

Information for Authors

正http://www.zju.edu.cn/jzus http://www.springerlink.com Aim The Journals of Zhejiang University-SCIENCE(A/B/C)are edited by the international board of distinguished Chinese and foreign scientists,and are aimed to present the latest developments and achievements in scientific research in China and     

Editorial:Brain-machine interface(BMI) and cyborg intelligence

正Brain-machine interfaces(BMIs)aim at building a direct communication pathway between the brain and an external device,and represent an area of research where significant progress has been made during the past decade.Based on BMIs,mind information can be read out by neural signals to control     

Information for Authors

正http://www.zju.edu.cn/jzus http://www.springerlink.com Aim The Journals of Zhejiang University-SCIENCE(A/B/C)are edited by the international board of distinguished Chinese and foreign scientists,and are aimed to present the latest developments and achievements in scientific research in China and overseas to the world’s scientific circles,especially to stimulate     

SCIENCE CHINA Information Sciences SUBJECT INDEX TO VOLUME 57(2014)

正~~     

Information for Authors

正http://www.zju.edu.cn/jzus http://www.springerlink.com Aim The Journals of Zhejiang University-SCIENCE(A/B/C)are edited by the international board of distinguished Chinese and foreign scientists,and are aimed to present the latest developments and achievements in scientific research in China and overseas to the world’s scientific circles,especially to stimulate