基于OPM的安全起源模型

为了确保数据起源的安全, 研究了开放起源模型, 并在该模型上进行安全起源的扩展, 建立了满足机密性和完整性的安全起源模型。在机密性中, 改进了Diffie-Hellman协议用来安全协商会话密钥, 从而用它来加密敏感信息; 在完整性中, 用三元组集合描述起源于关系, 并对其签名, 改进了基于签名的校验和使其适用于有向无环图中。最后以伪代码的形式给出了验证完整性的算法。开放式的安全起源模型的建立确保了数据起源的可信性。

Security provenance model based on OPM

Given the significant increase of using provenance, this paper presented a novel security provenance model based on open provenance model to ensure the integrity and confidentiality of provenance. In the study of confidentiality, it used an improved Diffie-Hellman key agreement to negotiate the session key to encrypt the sensitive information. In the study of integrity, it described the derived relations as a set of triples. It expanded the concept of signature-based checksum to make it available to the application of provenance graph. Finally it described the algorithm of integrity verification in the form of Pseudo-code.