基于度量认证的协同集成可信部署技术

协同开发技术是进行控制系统软件开发的重要方法, 其中的软件集成部署是协同开发技术的重要一环. 随着软件规模越来越大, 复杂性越来越高, 现有的软件集成部署方法由于缺乏标准统一的部署规范和安全机制, 所以会存在集成部署效率低下和安全性较差的问题. 针对上述问题, 提出了一种基于度量认证的协同集成部署方法, 解决在分布式协同开发环境下集成部署工作带来的安全和效率问题. 本文的主要思想是利用一种安全关联协议, 在软件部署双方之间建立可信的安全传输通道, 继而根据统一的打包部署规范, 完成软件的集成和部署工作. 理论分析和实验结果表明, 该方案统一了软件打包部署规范, 优化了完整性度量算法, 减少了认证和软件部署的时间, 并且由于部署双方在准备阶段已建立了安全关联, 所以提高了整个软件部署过程的安全性. 本文的研究内容能够在分布式开发环境下完成安全且高效的软件集成部署工作.

Collaborative and Integrated Trusted Deployment Technology Based on Metric Authentication

Collaborative development technology is an important method for the development of control system software, and the integrated deployment of software is an important part of collaborative development technology. With the increasing scale and complexity of software, the existing methods of software integration deployment have the problems of low efficiency and low security due to the lack of standardized and unified deployment specifications and security mechanisms. Aiming at the above problems, a collaborative integration deployment method based on metric authentication is proposed to solve the security and efficiency problems brought by integrated deployment work in distributed collaborative development environment. The main idea of this study is to use a security association protocol to establish a trusted secure transmission channel between the software deployment parties, and then complete the software integration and deployment according to the unified package deployment specification. Theoretical analysis and experimental results show that the scheme unifies the software package deployment specification, optimizes the integrity measurement algorithm, and reduces the time for software authentication and deployment. Since the two parties establish security associations, the security of the software deployment process can be improved. The research content of this study can complete safe and efficient software integration deployment in a distributed development environment.