SaaS模式下新型认证方案的设计与分析

针对软件即服务(SaaS)应用系统下认证协议的应用及安全性问题,提出一种新型认证方案。通过加密用户口令,将散列结果传输到网络上,只有服务器私钥才能解密,从而实现客户端及服务器双向认证一次性口令技术,提高认证系统的安全性。采用SVO逻辑对该协议进行形式化分析,结果验证了其安全性。     

适用于无线体域网的动态口令认证协议

无线体域网中传输的是与生命高度相关的敏感数据，身份认证是信息安全保护的第一道防线。现有的基于人体生物信息的身份认证方案存在信息难提取、偶然性大和误差性大的问题，基于传统密码学的认证方案需较大计算资源和能量消耗，并不适用于无线体域网环境。为此，在动态口令和非对称加密机制基础上，提出一种适用于无线体域网的动态口令双向认证轻量协议，并对其进行形式化分析。通过理论证明、SVO逻辑推理及SPIN模型检测得出：该协议满足双向认证，且能够抵御重放攻击、伪装攻击、拒绝服务器攻击和口令离线攻击，具有较高安全性。     

移动IP注册过程中主密钥分发方案研究

移动IP注册过程的安全,主要是通过认证和消息完整性保护实现的,因此,密钥的安全有效分发便成为保证注册过程安全的关键。根据注册过程中的密钥要求,提出了基于Diffie-Hellman密钥协商机制和椭圆曲线密码算法的主密钥分发方案,并运用SVO逻辑对该方案进行了安全性分行。分析结果表明,该方案实现了密钥分发过程中双方的身份认证以及密钥的确认性和新鲜性。     

Straight vegetable oil use in Micro-Gas Turbines: System adaptation and testing

The aim of this research work is to investigate the use of straight vegetable sunflower oil (SFO), a liquid biofuel, in a Micro-Gas Turbine (MGT). Compared to conventional diesel engines, micro-gas turbines represent a very reliable, clean and performing small scale cogeneration technology. Commercial gas turbines have already been tested with unconventional fuels, such as biomass derived fuels; however, research work on using Straight Vegetable Oil (SVO) as fuel in MGTs are really scarce.The chemical and physical characteristics of SVO are different from fossil diesel oil and rather far from the common technical specifications for gas turbine liquid fuels, not only in terms of kinematic viscosity and Lower Heating Value, but also as regards other issues as contaminant levels and composition, fuel cold properties, ignition properties, etc. Therefore, particular attention has to be given to the atomization and evaporation phases, as these are the most critical steps to achieve stable and efficient long term operation.An analysis based on numerical correlations available from literature was initially adopted for the analysis of the atomization process, supported by CFD modeling to qualitatively investigate the flow pattern. Control parameters were revised and set so to produce a sunflower oil spray having evaporation time comparable to diesel, and minor adaptations to the fuel line were designed and installed on the MGT.Tests with blends and straight vegetable oil were carried out to assess the difference between the standard and the modified machine, fed by diesel, in terms of exhaust emissions, power output and performances, that were similar to the standard diesel-fed MGT. Measured exhaust emissions were as expected well below those typical of diesel engines of the same size fed with VO. The experimental campaign confirmed that it is possible to operate a MGT fed with SVO through the adoption of minor modifications and by adjusting control parameters.     

Physics-based lithium ion silver vanadium oxide cathode model

A cathode half cell physics-based model for a St. Jude Medical fabricated silver vanadium oxide (SVO) cathode coin cell battery was constructed. The model is based on a single particle Fick's second law approach with the open-circuit potential modeled with a Redlich-Kister equation. By assuming that lithium ions intercalate only through the ends of the cuboid SVO particles, the model is able to predict accurately the discharge profile of experimental cathode half cell coin cells.     

基于聚合签名算法的DSR路由认证技术

分析了Ad Hoc网络中DSR按需路由发现原理及黑洞攻击原理,针对DSR路由协议面临的黑洞攻击问题,提出了一种基于JYH聚合签名算法的路由记录认证机制,新方案在DSR路由请求和路由应答消息中定义了路径证明属性,并设计了与之适应的输入签名算法和输出验证算法;最后,采用形式化逻辑SVO方法对该路由记录认证机制的安全性进行了分析。分析表明,提出的路由记录认证机制可以有效抵御针对DSR路由协议的黑洞攻击。     

一个非否认协议ZG的形式化分析

非否认性是电子商务协议的一个重要性质,其形式化分析问题引起了人们的密切关注.本文运用SVO逻辑对一个非否认协议实例进行了有效的形式化分析,并对协议的缺陷进行了改进.     

轻量级移动支付协议LMPP的安全性分析与改进

无线网络以及各种智能设备的兴起,使得移动支付越来越重要,因此必须采用安全的轻量级移动支付协议（Lightweight Mobile Payment Protocol,LMPP）来保障移动支付的顺利进行。针对资源有限的移动设备及环境受限的支付场景,选取以移动运营商（Mobile Network Operator,MNO）为价值链的轻量级的隐私保护移动支付协议为研究对象。采用SVO逻辑形式化分析协议,证明协议不满足公平性。并对LMPP协议其他安全属性进行分析,针对协议不满足公平性的部分做出改进。同时运用SPIN模型检测工具进行检测,验证结果表明,改进后的协议满足公平性。     

移动通信中一种认证密钥协商协议的分析及改进

移动通信应用越来越广泛,其安全问题也不容忽视,可是,移动设备计算能力较低,难于进行大量的复杂密码运算,采用哈希函数代替数字签名进行身份认证,能有效地降低通信中移动端的计算量．在全面分析了可用于移动通信中的MAP协议基础上,提出一种新的可相互认证的密钥协商协议MAKAP,新协议在计算复杂度、实现成本和通信开销方面都具有一定的优势．采用形式化分析的SVO逻辑方法分析,新协议是安全的．     

一种新型的非否认协议

在克服一种非否认协议草案的缺陷的基础上,提出一种新的非否认协议.新的协议可以在不安 全和不可靠的信道上工作,并能对付各种欺骗行为.此外,还对SVO逻辑进行扩充,引进一些新 的概念和方法,并用扩展后的SVO逻辑分析与证明新的非否认协议.