多层次周期性广播策略及系统模型——具有良好可扩展性的异步视频传输策略

异步视频服务是基于高速互联网络的典型应用,但是长期以来一直面临着系统可扩展性较差的问题,大量的用户数与有限的带宽资源之间的矛盾成为其主要问题。该文提出了一种具有良好可扩展性的异步视频传输模型,在网络层基于下一代高速互联网络将广泛支持的组播技术,在应用层创造性地使用了多层次的周期性广播策略。从而较为有效地解决了在分布式多视频服务器环境下系统提供异步视频服务的性能、价格以及可扩展性问题。     

植入城市计算综述

物联网通过感知技术实现物品与互联网的连接,云计算通过对共享资源的灵活整合和动态配置为用户提供面向需求的服务。基于上述背景,定义了植入城市计算的基本概念和功能框架,以植入城市计算应用场景为研究对象,比较了物联网技术与传统方法的数据采集、服务提供,论述了在人与环境交互中的感知应用部署、数据捕获、信息传播,阐述了云计算面向用户提供的数据管理服务、感知应用服务、位置查询服务。围绕植入城市计算的安全和隐私问题,对RFID隐私保护和身份认证、无线传感器网络密钥管理、参与感知隐私匿名化、云计算可信访问控制等进行了分析,并提出了进一步的研究方向。     

Internet of surveillance: a cloud supported large-scale wireless surveillance system

Large-scale video surveillance systems are among the necessities for securing our life these days. The high bandwidth demand and the large storage requirements are the main challenges in such systems. To face these challenges, the system can be deployed as a multi-tier framework that utilizes different technologies. In such a framework, technologies proposed under the umbrella of the Internet of Things (IoT) can play a significant rule in facing the challenges. In video surveillance, the cameras can be considered as “the things” that are streaming videos to a central processing and storage server (the cloud) through the Internet. Wireless technologies can be used to connect wireless cameras to the surveillance system more conveniently than wired cameras. Unfortunately, wireless communication in general tend to have limited bandwidth that needs careful management to achieve scalability. In this paper, we design and evaluate a reliable IoT-based wireless video surveillance system that provides an optimal bandwidth distribution and allocation to minimize the overall surveillance video distortion. We evaluate our system using NS-3 simulation. The results show that the proposed framework fully utilizes the available cloud bandwidth budget and achieves high scalability.     

Multipath routing and rate-controlled video encoding in wireless video surveillance networks

Video surveillance systems typically consist of many video sources distributed over a wide area, transmitting live video streams to a central location for processing and monitoring. The target of this paper—to bring down the overall system cost and increase feasibility, scalability, and performance—is to propose a new architecture for a wireless video surveillance network, whose telecommunication infrastructure is based on a wireless mesh network, and where video sources are able to estimate network bandwidth and consequently control their output rate. Multipath routing is applied in such a way that at least part of the information arrives at its destination even if a wireless link is shielded (maliciously or not). A case study is considered to discuss the performance of the proposed architecture, analyzing a comparison between single-path and multipath approaches.     

DPVoD:基于P2P的视频点播体系结构

可扩展性和可靠性是视频点播系统大规模应用的关键,提出了一种P2P点播系统结构DPVoD.系统基于应用层组播,用户以订制的缓存为其他节点提供服务,并形成相对独立的共享并发流组播树,组播树之问根据拥有的视频数据的重合程度而建立不同的组邻居关系,以此为基础,采用多种机制来提高系统性能:组协同工作、父亲点选择策略、状态控制协议和失效恢复等.定义并分析了可能对系统性能有严重影响的结尾雪崩问题并提出解决方案.对系统基本性能进行了理论分析.仿真结果表明,在静态和动态环境中,DPVoD系统的并发流占用数和利用率、可靠性等性能均优于类似系统.     

Secure spread: an integrated architecture for secure group communication

Group communication systems are high-availability distributed systems providing reliable and ordered message delivery, as well as a membership service, to group-oriented applications. Many such systems are built using a distributed client-server architecture where a relatively small set of servers provide service to numerous clients. In this work, we show how group communication systems can be enhanced with security services without sacrificing robustness and performance. More specifically, we propose several integrated security architectures for distributed client-server group communication systems. In an integrated architecture, security services are implemented in servers, in contrast to a layered architecture, where the same services are implemented in clients. We discuss performance and accompanying trust issues of each proposed architecture and present experimental results that demonstrate the superior scalability of an integrated architecture.     

A smartphone watch for mobile surveillance service

Mobile surveillance service is regarded as one of the Internet applications to which much attention is recently given. However, the time and cost problem resulting from using heterogeneous platforms and proprietary protocols must be a burden to developing such systems and expanding their services. In this paper, we present a framework of mobile surveillance service for smartphone users. It includes the design and implementation of a video server and a mobile client called smartphone watch. A component-based architecture is employed for the server and client for easy extension and adaptation. We also employ the well-known standard web protocol HTTP to provide higher compatibility and portability than using a proprietary one. Three different video transmission modes are provided for efficient usage of limited bandwidth resource. We demonstrate our approach via real experiments on a commercial smartphone.     

分布式云的研究进展综述

云计算作为全新的计算模式,将数据中心的资源包括计算、存储等基础设施资源通过虚拟化技术以服务的形式交付给用户,使得用户可以通过互联网按需访问云内计算资源来运行应用.为面向用户提供更好的服务,分布式云跨区域联合多个云站点,创建巨大的资源池,同时利用地理分布优势改善服务质量.近年来分布式云的研究逐渐成为学术界和工业界的热点.文中围绕分布式云系统中研究的基本问题,介绍了国际国内的研究现状,包括分布式云系统的架构设计、资源调度与性能优化策略和云安全方案等,并展望分布式云的发展趋势.     

A Java-centric Distributed Object-based Paradigm for Surveillance Services and Visual Message Exchange

Building an effective surveillance system on the Internet is an interesting application involving the interoperability of heterogeneous computing environments and the challenge of orchestrating the exchange of different visual message types in a unified manner. In this paper, we propose a distributed object-based paradigm to achieve this by applying the so-called bridging technologies for supporting distributed surveillance services. This paradigm integrates emerging technologies of the next-generation Internet-based applications ranging from wireless transmission at the network infrastructure level, to multi-tier, client/server, and RMI/CORBA at the architecture level, and to Java-centric, delegation-based visual user interfaces, and object web-based user interfaces at the system design level. The experimental results show that objects in the paradigm can efficiently cross the boundaries of different platforms, operating systems, programming languages, and visual message types. The DSS paradigm establishes a firm basis for supporting a variety of potentially cost-effective applications in a plug-and-play manner.     

普适计算认证过程基于粗糙集的隐私保护策略

在普适计算环境中,用户要获得需要的服务,需要向对应的服务提供商提供一定的认证信息,而这些认证信息中往往包含有用户不希望泄漏的隐私信息。为了对这些隐私信息进行保护,本文提出了认证过程中基于粗糙集的隐私保护策略：用户将认证信息扩展成粗糙集提供给服务提供商;服务提供商根据策略从粗糙集中提取用户的真实认证信息对用户请求进行认证。该策略充分利用了粗糙集合的不确定性,能够有效地防止用户隐私泄漏。     

监控视频云存储系统

非结构化数据呈爆炸态势增长, 传统存储技术在吞吐能力可扩展性及易管理性等方面急需改进, 通过分析安保视频数据存储的问题, 设计一种云计算架构下的安保视频监控存储系统, 基于框架技术搭建了对等架构的云计算环境, 并对其中的云存储策略进行了设计和建模. 实现在廉价不可信节点上存储海量私有化只读视频数据, 并提供高效可靠地访问. 仿真结果显示, 系统的存储性能可靠度高且易于扩展, 可提供效能较高的视频云存储服务.     

基于IP组播的多媒体远程监控系统WebEye的设计与实现

随着Internet/Intranet网络技术与多媒体技术的发展,多媒体远程监控系统呈现出数字化、智能化等新特点。在此介绍了基于IP组播的多媒体远程监控系统WebEye的设计思想、系统构成以及部分实现技术。利用IP组播技术,监控的视音频、现场告警与控制信号可在不增加带宽的情形下传至网络所及的每一个感兴趣的监控节点,使得监控信息可以从监控中心释放出来。该系统具有良好的可扩展性和实用性。     

Interactive multi-user video retrieval systems

In this paper we present two interactive multi-user systems for video search and browsing. The first is composed by web applications which allows multiuser interaction in a distributed environment; such applications are based on the Rich Internet Application paradigm, designed to obtain the levels of responsiveness and interactivity typical of a desktop application. The second system implements a multi-user collaborative application within a single location, exploiting multi-touch devices. Both systems use the same backend, based on a service oriented architecture (SOA) that provides services for automatic and manual annotation, and an ontology-based video search and browsing engine. Ontology-based browsing let users to inspect the content of video collections; user queries are expanded through ontology reasoning. User-centered field trials of the systems, conducted to assess the user experience and satisfaction, have shown that the approach followed to design these interfaces is extremely appreciated by professional archivists and people working on multimedia.     

车联网隐私保护技术研究

随着汽车智能化、网联化程度的不断加深,车辆、用户及第三方机构之间的数据共享日益成为刚需,由车辆、用户、路边单元等通信实体之间构建的网络车联网应运而生,而车联网的高移动性和网络拓扑多变性使其更容易遭受攻击,进而导致严重的车联网用户隐私泄露问题。如何平衡数据共享和隐私保护之间的关系成为车联网产业发展所面临的一个关键挑战。近年来,学术界针对车联网隐私保护问题进行了深入的研究,并提出了一系列解决方案,然而,目前缺少对这些方案从隐私属性方面进行分析。为此,本文首先从车联网的系统架构、通信场景及标准进行阐述。然后对车联网隐私保护的需求、攻击模型及隐私度量方法进行分析与总结。在此基础上从车联网身份隐私、匿名认证位置隐私和车联网位置服务隐私三个方面出发,介绍了匿名认证、假名变更、同态加密、不经意传输等技术对保护车联网用户隐私起到的重要作用,并讨论了方案的基本原理及代表性实现方法,将方案的隐私性从不可链接性、假名性、匿名性、不可检测性、不可观察性几个方面进行了分析与总结。最后探讨了车联网隐私保护技术当前面临的挑战及进一步研究方向,并提出了去中心化的车辆身份隐私技术以保护车辆身份隐私、自适应假名变更技术以支持匿名认证、满足个性化隐私需求的位置服务隐私保护技术,以期望进一步推动车联网隐私保护技术研究的发展与应用。     

Cooperative scheduling mechanism for large-scale peer-to-peer computing systems

Over recent years, peer-to-peer (P2P) systems have become an important part of Internet. Millions of users have been attracted to their structures and services. P2P computing is a distributed computing paradigm that uses Internet to connect thousands, or even millions, of users into a single large virtual computer based on the sharing of computational resources. One of the most critical aspects to the design of P2P computing systems is the development of scheduling techniques to manage the computational resources efficiently and in a scalable way. This paper proposes a cooperative scheduling mechanism with a two-level topology designed to work on large-scale distributed computing P2P systems. Our main contribution is proposing three criteria that only use local information to schedule tasks thus providing scalability to the overall scheduling system. By setting up these three criteria, the system can be easily adapted to work efficiently with very different kinds of distributed applications. The extensive experimentation carried out justifies the importance of good scheduling in such heterogeneous systems, but also emphasizes the importance of having a scheduling algorithm capable of being adapted to the requirements of different kinds of application.     

基于 Hadoop 的分布式视频处理

中国科学院计算机网络信息中心与青海湖保护区管理局合作,共同建设了青海湖野外网络视频监控。如何高效地处理每天产出的超过 100GB 的视频数据成为了一个难题。现在的视频处理系统采用计算和存储相分离的架构,这需要配置较高的专门服务器进行支撑,本文基于廉价扩展性能较好的 Hadoop 平台对视频处理做出了分布式的实现,并对单个视频文件做出了分布式转码的实现。同时,本文将基于 Hadoop 的分布式视频处理的实现和基于 HTCondor 的分布式视频的批处理实现进行了对比,实验证明,在不损失视频处理效率的条件下,基于 Hadoop 的分布式视频处理的实现拥有分布式文件系统支撑、完善的任务监控等优势。     

基于云计算的视频监控平台的研究

随着网格计算、虚拟化技术等的日渐成熟,以及目前各种社交类网站的大步发展对服务器的高性能、高可靠、高扩展性的需求,催生了云计算。基于云计算的智慧城市综合服务平台,以监控视频为基础,融合多种智慧城市应用业务如智慧社区、智慧家庭、智慧交通、智慧城管等。针对当前视频监控平台凸显的瓶颈,例如流媒体服务器负载过重、容灾能力弱、扩展能力弱等缺点,结合当前流行的开源分布式框架Hadoop,提出一套分布式视频存储,格式转码以及单节点隐患优化的解决方案。     

A Distributed Approach for Monitoring Multicast Service Availability

With the deployment of native multicast in commercial networks, multicast is getting closer to becoming a ubiquitous service in the Internet. The success of this deployment largely depends on the availability of good management tools and systems. One of the most important management tasks for multicast is to verify the availability of the service to its users. This task is usually referred to as reachability monitoring. Reachability monitoring requires a number of monitoring stations to work together to collect this information in a distributed manner in the interdomain scale. In this paper we present a general architecture for multicast reachability monitoring systems and focus on three critical functions: agent configuration, monitoring, and feedback collection. For each component, we provide a number of alternative approaches to implement the required functionality and discuss their advantages and disadvantages. Then, we focus on the feedback collection component. To a large extent, it determines the complexity and the overhead of a monitoring system. Using simulations, we compare a number of alternative approaches for feedback collection and make suggestions on when to use each. We believe our work provides insight into the issues and considerations in designing and developing multicast reachability monitoring systems.     

应用程序的自动发布服务:APS

ＷＷＷ除了在信息领域可以发挥作用之处,在计算领域同样很有潜力．人们试图在ＷＷＷ上构建一个虚拟的分布式计算环境ＷＷＷＣ,使得用户可以透明地远程使用ＷＷＷ上的计算资源．本文提出了一种基于ＷＷＷ的自动发布普通应用程序的思想,我们称它为ＡＰＳ．ＡＰＳ不仅构建ＷＷＷＶＣ的初步研究,它本身还有很现实的意义．本文介绍了普通程序的思想,我们称它的一个扩充应用．     

Internet-based interactive HDTV

Traditional interactive TV systems depend on expensive hardware, proprietary formats, and a closed-loop end-to-end approach, which greatly limits scalability and extensibility of TV services. In this paper, we present the HDControl interactive Internet TV architecture that achieves an open service model and combines high-quality video with flexible user control using two key software real-time algorithms: visual information embedding (VIE) algorithm and resynchronization algorithm. Experimental results in our HDTV testbed have confirmed the feasibility and efficiency of our proposed algorithms.