Recovering from a lost digital wallet: A smart cards perspective extended abstract

Multi-application smart cards enable a user to potentially have a diverse set of applications on her smart card. The growing trend of services convergence fuelled by Near Field Communication and smart phones has made multi-application smart cards a tangible reality. In such an environment, cardholders might have a number of applications on their smart cards and if a card is lost, all of the applications would be lost with it. In addition, consumers might decide to upgrade their smart cards and require a seamless and secure framework to migrate their applications from the old smart card to the new one. Currently, the recovery of a smart card-based service might take from a day to a week at best as each of the lost cards can only be replaced by the respective card issuer, during which time the card issuer might lose business from the user because she is not able to access the provisioned services. Similarly, there is at present no migration mechanism proposed for smart card applications. The proposed framework in this paper enables a user to acquire a new smart card as she desires and then migrate/restore all of her applications onto it—allowing her to recover from her lost digital wallet in a secure, efficient, seamless and ubiquitous manner.     

MDA的设想与实现

模型驱动体系结构(MDA)提出了一种利用模型进行软件开发的方法,它将模型作为软件开发过程的关键,MDA的基本思想是将模型区分为平台独立模型(platform independent model)和平台相关模型(platform specific model),通过不同抽象层次模型之间的转换完成软件开发过程。介绍了MDA的设想,包括MDA的基本概念,基于MDA的开发过程,讨论了实现MDA所涉及的几个重要问题。     

A classification and comparison of model checking software architecture techniques

Software architecture specifications are used for many different purposes, such as documenting architectural decisions, predicting architectural qualities before the system is implemented, and guiding the design and coding process. In these contexts, assessing the architectural model as early as possible becomes a relevant challenge. Various analysis techniques have been proposed for testing, model checking, and evaluating performance based on architectural models. Among them, model checking is an exhaustive and automatic verification technique, used to verify whether an architectural specification conforms to expected properties. While model checking is being extensively applied to software architectures, little work has been done to comprehensively enumerate and classify these different techniques.The goal of this paper is to investigate the state-of-the-art in model checking software architectures. For this purpose, we first define the main activities in a model checking software architecture process. Then, we define a classification and comparison framework and compare model checking software architecture techniques according to it.     

目标驱动的软件体系结构建模方法研究*

依据goalscenario coupling方法提出了一种基于概念属性的结构化目标描述与识别方法。根据上述方法获得的目标模型,在Le Metayer提出的基于图形语法的体系结构建模理论和原则基础之上,提出了一种新的、目标驱动的软件体系结构建模方法。     

模型驱动环境下模型演化的形式化研究

在模型驱动开发中,模型演化由一系列复杂的变化活动组成,模型的变化可以分为直接施加在模型元素上的增加、删除、更改等基本演化操作以及这些基本演化操作的组合。基于模型驱动体系结构,给出了模型和模型变化的形式化定义。模型的变化以模型差异来描述,在模型差异的基础上,研究了模型的合并、逆和组合运算。     

Analysis and design of a smart card based authentication protocol

Numerous smart card based authentication protocols have been proposed to provide strong system security and robust individual privacy for communication between parties these days. Nevertheless, most of them do not provide formal analysis proof, and the security robustness is doubtful. Chang and Cheng （2011） proposed an efficient remote authentication protocol with smart cards and claimed that their proposed protocol could support secure communication in a multi-server environment. Unfortunately, there are opportunities for security enhancement in current schemes. In this paper, we identify the major weakness, i.e., session key disclosure, of a recently published protocol. We consequently propose a novel authentication scheme for a multi-server envi- ronment and give formal analysis proofs for security guarantees.     

CSP在基于智能卡的移动终端中的开发与应用

IPSec VPN技术因其方便、安全性高等特点,成为现在普遍采用的一种增加网络安全性的方法。智能卡是一张内含嵌入式集成电路芯片的信用卡般大小的电子卡,它将密钥对与证书封在卡内,能够使加密操作在卡内进行,从而保证私钥不需出卡,大大提高了安全性。IPSec VPN和智能卡的结合在网络中应用已经越来越广泛。智能卡软硬件相结合的CSP能够通过微软的Crypto API向应用程序提供各种网络安全应用。该文在移动安全终端系统的背景下,详细介绍了基于智能卡的CSP的设计与开发过程。     

基于ASL的模型驱动架构测试方法

针对模型驱动架构（MDA）下的软件开发方法中测试启动比较晚、难以发现隐藏在模型中的缺陷及UML模型描述缺乏精确语义等问题,提出了基于ASL的模型测试方法：从UML模型出发,将动作规约语言（ASL）运用于平台无关模型（PIM）上建立测试模型。给出了ASL语句在MDA过程中的工作原理、平台无关模型的建立过程、测试用例建立的步骤、测试执行的实施过程,最后结合实例,在UML图的基础上运用ASL对测试环境进行构建,并创建了系统的测试用例,对模型及业务逻辑进行了测试。实验结果表明,提出的基于ASL的模型测试方法既能利用模型驱动对复杂的测试用例进行简化和抽象,又能在软件生存期早期揭示软件的缺陷,防止缺陷随着软件开发过程的进行而被放大。     

业务导向及模型驱动MIS软件构建的模型体系研究*

针对目前模型驱动架构对MIS开发中的业务建模与需求建模不能提供有效支持这一问题,提出一个以业务为导向、支持模型驱动MIS软件构建的模型体系;建立了一个以业务过程建模为核心的集成化建模元模型,给出了模型详细定义,为实现业务导向及模型驱动的MIS构造模式提供理论基础。     

The design of a language for model transformations

Model-driven development of software systems envisions transformations applied in various stages of the development process. Similarly, the use of domain-specific languages also necessitates transformations that map domain-specific constructs into the constructs of an underlying programming language. Thus, in these cases, the writing of transformation tools becomes a first-class activity of the software engineer. This paper introduces a language that was designed to support implementing highly efficient transformation programs that perform model-to-model or model-to-code translations. The language uses the concepts of graph transformations and metamodeling, and is supported by a suite of tools that allow the rapid prototyping and realization of transformation tools.     

基于加密卡的JCE的研究与实现

JCE是一个为Java程序提供机密性安全服务的框架.通过对JCE的设计原理的分析,以及对基于加密卡的JCE的3种可能实现方案的比较,提出了基于Microsoft CryptoAPI且遵照JCE的标准接口来实现CSP的方案,以便于对Java应用中的关键数据实现硬件加密.此外,还具体讨论了实现该CSP的步骤及其关键技术.     

基于模型驱动架构的煤质管理系统测试研究

针对煤质管理系统不断变化的业务逻辑、软件开发成本过高并难以维护的问题,提出了一种基于模型驱动架构的模型测试方法。通过建立测试模型,在加入动作规约语言的基础上执行测试用例和反馈测试结果,发现模型缺陷并及时重构,从而提高系统质量。结合煤质管理系统回采和掘进工作面绘制进行建模和测试,验证了该方法的可行性。     

Supporting runtime software architecture: A bidirectional-transformation-based approach

Runtime software architectures (RSA) are architecture-level, dynamic representations of running software systems, which help monitor and adapt the systems at a high abstraction level. The key issue to support RSA is to maintain the causal connection between the architecture and the system, ensuring that the architecture represents the current system, and the modifications on the architecture cause proper system changes. The main challenge here is the abstraction gap between the architecture and the system. In this paper, we investigate the synchronization mechanism between architecture configurations and system states for maintaining the causal connections. We identify four required properties for such synchronization, and provide a generic solution satisfying these properties. Specifically, we utilize bidirectional transformation to bridge the abstraction gap between architecture and system, and design an algorithm based on it, which addresses issues such as conflicts between architecture and system changes, and exceptions of system manipulations. We provide a generative tool-set that helps developers implement this approach on a wide class of systems. We have successfully applied our approach on JOnAS JEE system to support it with C2-styled runtime software architecture, as well as some other cases between practical systems and typical architecture models.     

一个匿名的基于生物特征的多服务器的密钥认证协议方案的研究

随着通讯技术的快速发展,用户的口令与生物特征值的结合越来越普遍。最近,Chuang等提出了一个基于用户口令和生物特征值的匿名的多服务器的认证密钥协议方案。本文指出了Chuang等协议容易受到丢失智能卡攻击、伪装攻击、重放攻击和服务器伪装攻击,并且没有提供匿名性。因此针对上述协议的安全缺陷,本文提出了一个新的、有效的基于生物特征的多服务器的密钥认证协议。通过详细的安全和性能分析,证明出本文所提出的协议能够抵抗多种攻击,并且提供匿名性,与Chuang等协议相比,该新协议更加安全和实用。     

The HORSE framework: A reference architecture for cyber-physical systems in hybrid smart manufacturing

In the Industry 4.0 era, manufacturers strive to remain competitive by using advanced technologies such as collaborative robots, automated guided vehicles, augmented reality support and smart devices. However, only if these technological advancements are integrated into their system context in a seamless way, they can deliver their full potential to a manufacturing organization. This integration requires a system architecture as a blueprint for positioning and interconnection of the technologies. For this purpose, the HORSE framework, resulting from the HORSE EU H2020 project, has been developed to act as a reference architecture of a cyber-physical system to integrate various Industry 4.0 technologies and support hybrid manufacturing processes, i.e., processes in which human and robotic workers collaborate. The architecture has been created using design science research, based on well-known software engineering frameworks, established manufacturing domain standards and practical industry requirements. The value of a reference architecture is mainly established by application in practice. For this purpose, this paper presents the application and evaluation of the HORSE framework in 10 manufacturing plants across Europe, each with its own characteristics. Through the physical deployment and demonstration, the framework proved its goal to be basis for the well-structured design of an operational smart manufacturing cyber-physical system that provides horizontal, cross-functional management of manufacturing processes and vertical control of heterogeneous technologies in work cells. We report on valuable insights on the difficulties to realize such systems in specific situations. The experiences form the basis for improved adoption, further improvement and extension of the framework. In sum, this paper shows how a reference architecture framework supports the structured application of Industry 4.0 technologies in manufacturing environments that so far have relied on more traditional digital technology.     

基于消息驱动Bean的异步通信模型设计

异步通信是一种松耦合的分布式通信模式,允许应用程序以发送方和接受方相互独立的形式,通过交换消息进行通信.消息驱动Bean作为处理异步消息的EJB组件,因其支持异步非阻塞的消息传递机制,在基于EJB的应用系统中日渐得到应用.提出了一种基于消息驱动Bean的异步通信模型.该模型使用MDB实现消息的异步消费,解决了EJB远程方法调用开销大等问题,降低了应用程序和EJB组件之间的依赖性,从而有效地提高了异步通信的性能和可靠性.     

Towards a data‐driven IoT software architecture for smart city utilities

The Internet of things (IoT) is emerging as the next big wave of digital presence for billions of devices on the Internet. Smart cities are a practical manifestation of IoT, with the goal of efficient, reliable, and safe delivery of city utilities like water, power, and transport to residents, through their intelligent management. A data‐driven IoT software platform is essential for realizing manageable and sustainable smart utilities and for novel applications to be developed upon them. Here, we propose such service‐oriented software architecture to address 2 key operational activities in a smart utility: the IoT fabric for resource management and the data and application platform for decision‐making. Our design uses Open Web standards and evolving network protocols, cloud and edge resources, and streaming big data platforms. We motivate our design requirements using the smart water management domain; some of these requirements are unique to developing nations. We also validate the architecture within a campus‐scale IoT testbed at the Indian Institute of Science, Bangalore and present our experiences. Our architecture is scalable to a township or city while also generalizable to other smart utility domains. Our experiences serve as a template for other similar efforts, particularly in emerging markets and highlight the gaps and opportunities for a data‐driven IoT software architecture for smart cities.     

A service-oriented architecture for coupling web service models using the Basic Model Interface (BMI)

Service-oriented approach for model coupling is gradually gaining momentum. By leveraging the World Wide Web, the service-oriented approach lowers the interoperability barrier of integrating models in terms of programming languague and operating system. While such paradigm has been applied to integrate models wrapped with some standard interfaces, this paper considers the Basic Model Interface (BMI) as model interface. The advantages of BMI are that it (1) enrich the semantics of variable names, and (2) is framework-agnostic. We exposed the BMI-enabled models through web services. Then, a smart modeling framework, the Experimental Modeling Environment for Linking and Interoperability (EMELI), was enhanced into a web application (i.e., EMELI-Web) to integrate the BMI-enabled web service models. By implementing the whole orchestration in coupling TopoFlow components, we demonstrate that BMI helps connect web service models by reducing the heterogeneity of variable names, and EMELI-Web makes it convenient to couple BMI-enabled web service models.