网络安全中的椭圆曲线盲数字签名和身份识别

文章设计了一类基于椭圆曲线密码体制的盲数字签名方案,并在该方案的基础上设计了一种身份识别方案,具有较高的安全性,在实际应用中是可行的。     

“We Release Them Little by Little”: Maturation and Gender Identity as Seen in the Use of Mobile Telephony

This paper examines the social meaning behind the adoption of mobile telephones by teenagers in Norway. Through this adoption process one can see the way in which youths are developing their adult identity as well as their gendered identity. The primary database used in this analysis is from two telephone questionnaires of Norwegian youth aged 13–20 carried out in October and December 1998. A total of 2007 interviews are included. The survey instrument covered teenagers’ ownership of mobile telephones, payment forms and the use of mobile telephones to send and receive Short Message System (SMS) text messages. In addition, the analysis draws on a survey of 1001 Norwegian parents and ethnographic interviews of 12 families.     

一种基于信标控制的安全通信机制及其应用

提出了一种以信标控制为基础、基于 ＴＣＰ／ＩＰ协议的、用于 Ｉｎｔｅｒｎｅｔ上证券交易的安全通信机制,可以实现保密与认证,具有防伪造、防重放、防抵赖功能。     

易损数字水印若干问题的研究

易损数学水印算法可用于多媒体内容真实性的保护。为更有效地设计和使用易损水印,首先通过研究其算法应具有的特点及易损水印与鲁棒水印的差别;然后在可信赖的数码相机这个应用背景的基础上,提出了一个简单的易损水印应用框架;最后,讨论了变换域易损图象数学水印算法的误差问题和逆变换后象素值溢出的问题,同时给出了两种解决方法,并利用此方法对一种基于小波变换的易损水印算法做了改进。     

身份认证技术

本文简要描述了身份认证的概念和身份认证机制,主要介绍了身份认证的密码技术,电子钥匙和生物辨别技术,最后提出了异地漫游问题的解决方案。     

基于.net的安全性验证

采用自定义主体Principal和身份Identity实现基于窗体的安全验证,构建了一个灵活方便的安全权限管理系统,综合使用了数据库技术、面向对象设计技术、操作系统权限管理、NET框架中基于代码访问安全性和基于角色访问安全性等多方面技术。该方案可以用于多数WEB系统中,作为通用的安全权限管理模块。     

一种基于PKI体系的USB Key认证客户端的设计研究

由于互联网所具有的广泛性和开放性,决定了互联网不可避免地存在着信息安全隐,进行身份认证就是必须的安全措施。本论文比较分析了常见的身份认证的方式的优缺点,并在此基础上讨论了USB Key认证方式的原理、特点,以及PKI体系的认证过程,重点上从软件设计和硬件设计两个角度完成了基于PKI体系下的USB Key认证客户端,对于提高身份认证技术的安全性具有一定的借鉴意义。     

A distributed expansible authentication model based on Kerberos

There is a potential server bottleneck problem when the Kerberos model is applied in large-scale networks because the model uses centralized management. To enlarge its application scope, researchers must consider how to build a trust relation among those Kerberos servers located on different isolated domains, but have not provided a way to prevent the potential bottleneck that can occur with Kerberos servers. With the development of across-domain authentication techniques, the local server bottleneck problem has not been alleviated; in fact, it has become more serious.Adopting the rigorous binary tree code algorithm, we present an authentication model based on Kerberos. Compared with similar models, our model has several advantages. First, it overcomes the potential server bottleneck problem and can balance the load automatically. Second, it can process across-domain authentication and enlarge the authentication boundary. Finally, its authentication path is short, with no more than two Kerberos servers being involved when authenticating a user.     

一个数字认证签名系统的设计与实现

介绍了一种数字认证签名算法,用该算法设计实现的系统可用于对抗信息的冒充、篡改、重发等攻击。     

动态Ad hoc网络环境下组播源认证研究*

就Ad hoc网络环境下基于消息认证码的源认证技术进行了研究和分析,针对TESLA源认证方案给出了一个新的源认证引导方案,并采用间接引导方式来适应Ad hoc网络。实验数据表明,新的引导方案可以在较大程度上减轻系统的负担,从而提高认证的效率。