基于可信平台模块的NSPK协议

本文针对Needham-Schroeder公钥认证协议存在的问题,利用TPM的相关功能对协议进行了改进,提出了基于TPM的NSPK认证协议。解决了攻击者仿冒实体A与实体B共享秘密数据的安全缺陷,使其安全性有了显著提高。     

一种基于完整性度量架构的数据封装方法

封装存储是可信计算平台的一项重要功能,它能将数据的加密存储与平台状态结合起来,提供了更强的安全存储保证.但现代操作系统结构越来越复杂,各种启动项的加载顺序也相对随机;平台配置的频繁改变、软件更新及系统补丁等都限制了封装存储的应用.而操作系统级的完整性度量架构(IMA)能将信任链扩展到整个计算平台,为封装存储提供了支持.为此,基于IMA提出一种新的数据封装方法,采用相对固定的标准状态来封装,结合易变IMA度量列表和结果以及经过签名的名单策略来评估平台状态,解决了操作系统复杂性带来的配置寄存器(PCR)的值不确定性和软件更新及系统补丁带来的频繁封装问题.     

Effect of Different Crowding Agents on the Architectural Properties of the Bacterial Nucleoid-Associated Protein HU

HU is a nucleoid-associated protein expressed in most eubacteria at a high amount of copies (tens of thousands). The protein is believed to bind across the genome to organize and compact the DNA. Most of the studies on HU have been carried out in a simple in vitro system, and to what extent these observations can be extrapolated to a living cell is unclear. In this study, we investigate the DNA binding properties of HU under conditions approximating physiological ones. We report that these properties are influenced by both macromolecular crowding and salt conditions. We use three different crowding agents (blotting grade blocker (BGB), bovine serum albumin (BSA), and polyethylene glycol 8000 (PEG8000)) as well as two different MgCl₂ conditions to mimic the intracellular environment. Using tethered particle motion (TPM), we show that the transition between two binding regimes, compaction and extension of the HU protein, is strongly affected by crowding agents. Our observations suggest that magnesium ions enhance the compaction of HU–DNA and suppress filamentation, while BGB and BSA increase the local concentration of the HU protein by more than 4-fold. Moreover, BGB and BSA seem to suppress filament formation. On the other hand, PEG8000 is not a good crowding agent for concentrations above 9% (w/v), because it might interact with DNA, the protein, and/or surfaces. Together, these results reveal a complex interplay between the HU protein and the various crowding agents that should be taken into consideration when using crowding agents to mimic an in vivo system.     

Strategic maintenance-management in Nigerian industries

A developing society needs to adapt to change and foster creativity. In the pursuit of continual improvement (e.g., reducing fossil-fuel consumption and waste, better service performance, greater availability and improved reliability), implementing wise maintenance-schedules is essential for contemporary organisations. Several studies of a wide range of Nigerian industries indicate that indigenous low availability and low productivity are endemic. The resulting closure of some of these industries has triggered off a realisation of the strategic challenges in maintenance management. In addition, the increasingly-competitive business environment in Nigeria has raised the strategic importance of maintenance functions, especially in organisations with significant investments in physical assets. Five strategic aspects of maintenance management have been identified, namely: maintenance methodology; support processes; organisation and work structuring; comparable culture; and general management policy. Three factors that permeate these dimensions are wise leadership, excellent communications and an understanding of the human factors involved.     

基于TPM的嵌入式可信计算平台设计

增强工业嵌入式系统的安全性是当今工业信息安全领域研究的核心议题。只依靠软件的安全机制已经不能充分地保护信息安全,而现有的可信平台模块是专为个人计算机设计的,不能满足工业嵌入式系统的特殊需求。通过研究可信计算技术,设计了基于可信平台模块TPM的嵌入式可信计算平台,并从软件结构和硬件结构,分析了可信平台模块和信任链的传递机制。最后,在ZYNQ硬件平台上进行可信验证,通过内核伪造攻击测试,验证了设计的正确性,从而确保了工业嵌入式平台的安全可信。     

丰田生产方式和全面生产保养的整合与推行

论述了丰田生产方式(TPS)与全面生产保养(TPM)的关联性,提出一个整合TPS/TPM生产管理活动的结构模型,在此基础上分析了如何推动TPS/TPM生产管理活动.     

行之有效的设备管理模式--TPM活动实践

TPM是一项行之有效的企业管理方法，其基本方法是通过开展全员的以自主保全为模式的生产维修活动，最大限度地提高设备的综合效率。介绍了企业通过开展TPM的实践所带来的变化和收益。     

Development of Kaizen case-base for effective technology transfer–a case of visual management technology

In this paper, focusing on visual management (VM) technology as an effective vehicle of continuous improvement activities, Kaizen case-base and its effectiveness are discussed by following three steps. For the first step, a framework of a Kaizen case transfer is placed to develop for effective VM development and transfer. For the second step, an example of VM case-base is constructed by using VM cases collected through a literature survey and factory investigations. For the third step, performance of the example VM case-base is validated by applying the proposed procedure, which consists of: (1) clarifying instances of current Kaizen problem; (2) retrieving Kaizen case-base by using established instances to detect applicable Kaizen cases; (3) developing suitable Kaizen cases to solve the current problem effectively; (4) applying suitable Kaizen cases to the current problem; and. (5) registering applied Kaizen cases for the current problem in Kaizen case-base, instances of it being clarified.     

嵌入式系统的可信计算

文章介绍了可信计算的基本概念,给出嵌入式系统可信计算的硬件设计要求,具体阐述其中CPU和可信平台模块设计思路。     

一种基于TPM增强的ARAN安全路由协议

安全路由协议设计是Ad hoc网络安全研究的重要组成部分。当前研究主要集中在采用经典密码学中的方法来保证路由安全。结合可信计算中的TPM和典型的安全路由协议ARAN,提出了一种新的安全路由协议TEARAN,该协议不再采用集中式的公钥证书分发中心PKI,而是采用TPM中的DAA(Directed Anonymous Attestation)方式来进行节点的身份认证,以及软安全中可信阂值来监测部居节点的行为,从而进行公钥可信分发,同时确保了无恶意节点加入网络,另外,也采用公钥签名、会话密钥加密来保证端到端通信的保密性、完整性和不可否认性。理论证明了提出的TEARAN协议能够实现网络的匿名安全,防范当前常见的攻击方式,达到了很好的安全保证效果。