1、中南民族大學(xué)碩士學(xué)位論文自動(dòng)信任協(xié)商中隱藏證書(shū)系統(tǒng)安全性研究姓名：余涵申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：雷建云20110503自動(dòng)信任協(xié)商中隱藏證書(shū)系統(tǒng)安全性研究IIAbstractInthedistributedcomputingenvironmentofresourcesharingitisoftenneededtoacrossmultiplesecuritydomainsfresourcesaccessinghowt

2、ocompletethemultidomaincontroltoestablishatrustrelationshipbetweenstrangeentitiesunderthecurrentsituationhasbecomeahottopicinthecurrentstudyofinfmationsecurity.ThetraditionalaccesscontroltechnologiessuchasDACRBACareallwi

3、thinasinglesecuredomainitcannotsuitablefmultidomainenvironment.TheproposedschemeAutomatedTrustNegotiation(ATN)hassolvedthisproblem.Itregulateshowtodisclosedigitalcredentialsaccesscontrolpoliciesprovidesamethodtoestablish

4、mutualtrustbetweenstrangersthatwishtoshareresourcesconductbusinesstransactionsfromdifferentsecuritydomainsbyusingexchangeofattributecredentials.ThecurrentresearchofATNhasfocusesonnegotiationmodelspolicylanguagetheprotect

5、ionofsensitiveinfmationduringthenegotiationssoon.Inparticulartheprotectionofsensitiveinfmationscholarshaveputfwardmanykindsofnegotiationprotocolsthehiddencredentialssystemisarepresentativescheme.Hiddencredentialsencrypti

6、onalgithmisconstructedinthebilinearwithhighsecurityconfidentiality.Infmationresourcesinconsultationwiththeaccesscontrolpolicyfencryptiononlytodecryptthecertificatetomeetthestrategy.Certificatepolicyarenottransmittedonthe

7、wktopreventthedisclosureofsensitiveinfmation.Thisresearchfocusesonthehiddencredentialssystemintheapplicationofautomatedtrustnegotiationanalyzestheadvantageofhiddencredentialsofcertificatethreatofattackthatisfacedwithinmu

8、ltiplesecuritydomainsthemaincontentsare:(1)ToanalyzetheantiattackcapabilityofhiddencredentialssystemsummarizedtheadvantageoftheprotectionofsensitiveinfmationaswellasresistancetoDoSattacksvulnerabilitiesofCAimitationattac

9、ks.(2)FthevulnerableofhiddencredentialswhenDoSattackshappensanalyzethemainfmofDoSattackinautomatedtrustnegotiation.Basedontheexisthiddencredentialssystemanimprovedsolutionisproposeditintroducesthemessageauthenticationmec