基于LDAP和SOAP的校园统一身份认证系统的研究与实现

随着校园网的逐步建设完善,基于校园网的应用得到迅速发展,迫切需要建立一个统一身份认证系统,对用户实行统一管理、统一认证和统一授权。提出了一个基于LDAP和SOAP的统一身份认证实现框架。     

Surge:一种新型、低资源、高效的轻量级分组密码算法

目前,适合资源约束的轻量级密码算法已成为研究热点。提出一种低资源、高性能与高安全性的新轻量级分组密码算法Surge。Surge密码分组长度为64位,使用64位、80位和128位3种密钥长度,且基于SPN结构。轮函数分为5个模块,密钥扩展模块采用无扩展方式;轮常数加模块采用0到15的数字组合成轮常数,构造高效且高度混淆的轮常数加变换;列混合模块利用易于硬件实现的(0,1,2,4)组合矩阵,从而可以在有限域GF(2⁴)上构造硬件实现友好型矩阵。将Surge算法在FPGA上进行了实现,实验结果表明,相对于目前SPN结构的轻量级密码算法,Surge算法占用的面积资源更小,同时有着良好的加密性能;安全性实验证明了Surge可以有效抗差分与线性攻击、代数攻击。     

基于容器的Web运行环境轻量级虚拟化方法

Web运行环境、Web服务及Web应用的虚拟化是减轻Web操作系统安全风险的一种有效方法,然而Web运行环境的虚拟化仍然存在不少挑战,如：执行时间、资源负载和兼容性等。为解决Web操作系统在安全性、执行时间、资源负载和兼容性方面的问题,提出了一种Web运行环境轻量级虚拟化方法,采用Docker容器技术实现进程级别的隔离。本虚拟化方法可在一个基本内核上支持运行多种Web运行环境的容器。此外,为了减轻容器创建负载,提出了容器启动机制;为减轻系统资源负载,进行了系统的轻量化处理。在嵌入式设备的实验结果表明,该虚拟化方法在执行时间、资源负载及兼容性方面都具有较优表现。     

轻量级J2EE架构的研究

随着开源运动的不断发展,从数据持久层到业务层再到表现层都涌现了一批优秀的轻量级开源框架。针对轻量级J2EE架构的整体设计和各个层的具体设计展开研究,综述了各个层中出现的主要框架和设计方案,分别对它们进行了比较分析。     

轻量级移动支付协议LMPP的安全性分析与改进

无线网络以及各种智能设备的兴起,使得移动支付越来越重要,因此必须采用安全的轻量级移动支付协议（Lightweight Mobile Payment Protocol,LMPP）来保障移动支付的顺利进行。针对资源有限的移动设备及环境受限的支付场景,选取以移动运营商（Mobile Network Operator,MNO）为价值链的轻量级的隐私保护移动支付协议为研究对象。采用SVO逻辑形式化分析协议,证明协议不满足公平性。并对LMPP协议其他安全属性进行分析,针对协议不满足公平性的部分做出改进。同时运用SPIN模型检测工具进行检测,验证结果表明,改进后的协议满足公平性。     

Deriving tabular event-based specifications from goal-oriented requirements models

Goal-oriented methods are increasingly popular for elaborating software requirements. They offer systematic support for incrementally building intentional, structural and operational models of the software and its environment. They also provide various techniques for early analysis, notably, to manage conflicting goals or to anticipate abnormal environment behaviours that prevent goals from being achieved. On the other hand, tabular event-based methods are well-established for specifying operational requirements for control software. They provide sophisticated techniques and tools for late analysis of software behaviour models through simulation, model checking or table exhaustiveness checks. The paper proposes to take the best out of these two worlds to engineer requirements for control software. It presents a technique for deriving event-based specifications, written in the SCR tabular language, from operational specifications built according to the KAOS goal-oriented method. The technique consists of a series of transformation steps each of which resolves semantic, structural or syntactic differences between the KAOS source language and the SCR target language. Some of these steps need human intervention and illustrate the kind of semantic subtleties that need to be taken into account when integrating multiple formalisms. As a result of our technique SCR specifiers may use upstream goal-based processes à la KAOS for the incremental elaboration, early analysis, organization and documentation of their tables, while KAOS modelers may use downstream tables à la SCR for later analysis of the behaviour models derived from goal specifications.     

Studies on visual scene process system of aircraft assembly

According to the aircraft assembly worksite scene process, the hierarchical data model based on PPR (product, process, resources) was got to achieve the conversion in various types of aircraft assembly process data model. At the same time, the lightweight technology and human–computer interactive scene control technology were researched to obtain the lightweight of three-dimensional (3D) model and site scene and the human–computer real-time interaction between people and virtual environment through the computer keyboard and mouse, respectively. And then, the visual assembly sequence planning algorithm based on the parallel binary-coded was suggested to complete the aircraft assembly sequence planning. On the basis of techniques mentioned above, we developed the assembly worksite scene process system, which can be integrated with PDM system. At last, an application case of aircraft nose assembly was given, and the result was proved to be effective.     

用不可能差分法分析12轮ESF算法

轻量级分组密码算法ESF是一种具有广义Feistel结构的32轮迭代型分组密码,轮函数具有SPN结构,分组长度为64比特,密钥长度为80比特。为了研究ESF算法抵抗不可能差分攻击的能力,基于一条8轮不可能差分路径,根据轮密钥之间的关系,通过向前增加2轮、向后增加2轮的方式,对12轮ESF算法进行了攻击。计算结果表明,攻击12轮ESF算法所需的数据复杂度为O(2⁵³),时间复杂度为O(260.43),由此说明12轮的ESF算法对不可能差分密码分析是不免疫的。     

φ410mm轻型熔石英反射镜

报道了φ４１０ｍｍ轻型熔石英反射镜的研制概况，首先分析了轻型反射镜对材料的要求，选择了熔石英作主反射镜材料。比较了熔石英反射镜轻量化技术途径的优缺点，选择了高温熔合物封接的技术方案，研究了封接材料和高温熔合物封接技术。     

自密实混凝土在CL结构墙体中的应用

本文根据CL(Composite Lightweight)结构墙体用自密实混凝土(Self-Compacted Concrete)的特点,阐述了SCC的配合比设计过程及生产运输浇筑过程,提出了SCC配比设计要强度、工作性"两手抓"及CL结构墙体SCC现浇要保证及时性、连续性,并且要"选点下料,连续浇筑"的观点。