跳到主要內容

臺灣博碩士論文加值系統

(216.73.216.31) 您好!臺灣時間:2026/10/17 13:59
字體大小: 字級放大   字級縮小   預設字形  
回查詢結果 :::

詳目顯示

我願授權國圖
: 
twitterline
研究生:廖璟璜
研究生(外文):Ching-Huang Liao
論文名稱:一種在MANet上的存取控制方法之研究
論文名稱(外文):A Study of Access Control on the MANet
指導教授:詹進科詹進科引用關係、陳育毅
學位類別:碩士
校院名稱:國立中興大學
系所名稱:資訊科學系所
學門:工程學門
學類:電資工程學類
論文種類:學術論文
論文出版年:2006
畢業學年度:94
語文別:中文
論文頁數:70
中文關鍵詞:存取控制、會員資格控制
外文關鍵詞:accesss control、admission control、MANet
相關次數:
  • 被引用被引用:0
  • 點閱點閱:385
  • 評分評分:
  • 下載下載:0
  • 收藏至我的研究室書目清單書目收藏:0
由於行動技術和裝置的日益普及,故動態和行動網路的環境需求也是日益增加,其中一種環境便是MANet,故我們在此MANet環境下,設計我們的協定。然而,MANet是一個動態的群體網路,所以任何節點皆可加入網路進行通訊和分享,但是如此放任節點隨意加入和離開,可能會導致群體網路被瓦解,故我們採用會員資格控制的方法來控管會員。但在我們研讀關於MANet環境下的存取控制(Access Control)安全研究,有些學者提出以會員資格控制(Admission Control)的方法來解決。但依據ISO/IEC 1211-3文件[43]所定義存取控制應符合的條件,我們發現前述的會員資格控制方法針對資訊的洩漏、未被允許的修改動作和惡意的破壞等三項條件並無法達成,以及實例的佐証,皆可以發現會員資格控制和存取控制並非相等同。故在這篇論文中,我們提出應將存取控制分成五個階段來達成,分別為:初始階段(Initialize Phase)、啟動階段(Bootstrap Phase)、會員資格控制階段(Admission Control Phase)、資源搜尋階段(Resource Search Phase)、資源分享階段(Resource Sharing Phase),並在其中解決如何搜尋資源、存取權限控制、資源的立即使用問題和自私節點問題等,以期在MANet環境下達成真正安全的存取控制。
Because motion technology and equipment are daily popularization, demand of the tendency and the motion network environment also is increases day by day. One kind of environment is MANet. Therefore, we design our agreement on the MANet environment. However, MANet is a dynamic community network. Every node is free to join the network, then to carry on the communication and the share. If the free nodes are at will join and leave, the community network can possibly cause to disintegrate. Therefore, we use the method of the admission control to manage the members. Reading the security research about the access control on the MANet environment, some scholars proposed by the method of the admission control to solve. But we refer to the ISO/IEC 1211-3 document [43] to define the conditions which the access control should be observed. We discover the formerly states the admission control method. The three conditions which are disclosure, malicious modification and malicious destruction are unable to achieve. We also give some the example. We can discover that the admission control isn’t equally with the access control. Therefore, in this paper, we propose that the access control must be divided into five stages to achieve, respectively is: the Initialize Phase, the Bootstrap Phase, the Admission Control Phase, the Resource Search Phase, the Resource Sharing Phase. We also solve how to search the resources, the access policy, whether the source is available, the question about selfish nodes and so on. Achieves the true secure access control on the MANet environment.
摘要 I
ABSTRACT II
第一章 動機與目的 1
第一節 基本概念 1
1-1-1. MANet發展史 1
1-1-2. 基本運作架構 1
1-1-3. 基本特性 2
1-1-4. 架設觀點 3
1-1-5. 網路架構模組 3
1-1-6. 適用環境 6
1-1-7. 相關主題 6
第二節 資訊安全概念 8
1-2-1. 網路安全服務 8
1-2-2. 安全攻擊 8
1-2-3. 網路安全議題 9
第三節 研究動機與目的 11
第二章 會員資格控制的協定和介紹 13
第一節 緒論 13
第二節 會員資格控制的運作方式 15
第三節 結論 19
第三章 定義與說明 20
第一節 環境需求和說明 20
第二節 定義存取控制 21
第三節 結論 24
第四章 POLLING協定和環境介紹 25
第一節 緒論 25
第二節 GNUTELLA簡介 26
第三節 基於GNUTELLA下的POLLING協定 32
第四節 結論 39
第五章 存取控制 40
第一節 設計概觀 40
第二節 我們的設計 41
5-2-1. 初始階段 43
5-2-2. 啟動階段 43
5-2-3. 會員資格控制階段 46
5-2-4. 資源搜尋階段 49
5-2-5. 資源分享階段 51
第六章 協定安全與效率分析 56
第一節 緒論 56
第二節 安全考量分析 58
第七章 結論 63
第一節 研究結論 63
第二節 未來發展 66

表格目錄
表格 1各架構模組比較 5
表格 2 MANET的各層安全議題 9
表格 3主要命令元的定義和描述 26
表格 4 POLLING協定 36
表格 5符號表 43
表格 6資源清單欄位 50
表格 7有無輔助者決定多項式的比較表 60
圖表目錄
圖表 1 WIRELESS AD HOC NETWORK 2
圖表 2 CLIENT-SERVER 架構 4
圖表 3 單純點對點架構 4
圖表 4 混合式架構 5
圖表 5多重藩蘺安全解決 10
圖表 6安全機制流程圖 12
圖表 7會員資格控制 14
圖表 8單一CA註冊/控管 15
圖表 9新加入者加入示意圖 16
圖表 10由一主機發送THRESHOLD多項式 17
圖表 11由多節點組成THRESHOLD多項式 17
圖表 12多CA的會員資格控制流程概圖 18
圖表 13會員資格控制不等於存取控制 19
圖表 14 PING/PONG ROUTING-同一時間僅能對一PING作PONG之反應 30
圖表 15 QUERY/QUERYHIT/PUSH ROUTING-依循同一路徑 30
圖表 16 GNUTELLA WORK-RESOURCE SEARCHING 31
圖表 17 GNUTELLA WORK-RESOURCE DOWNLOADING 31
圖表 18 P2PREP WORK-RESOURCE SEARCHING 32
圖表 19 P2PREP WORK-POLLING 33
圖表 20 P2PREP WORK-VOTE EVALUATION 34
圖表 21 P2PREP WORK-RESOURCE DOWNLOADING 35
圖表 22啟動階段-發出成立訊息 44
圖表 23啟動階段-取得成立資訊 45
圖表 24啟動階段-要求部分憑証 46
圖表 25會員資格控制階段-新節點發出加入要求 47
圖表 26會員資格控制階段-新節點取得同意節點資訊 47
圖表 27會員資格控制階段-新節點送出同意節點集合 48
圖表 28會員資格控制階段-新加入者計算GMC 49
圖表 29資源搜尋階段-QUERY 50
圖表 30資源搜尋階段-QUERYREPLY 51
圖表 31資源搜尋階段-VERIFY 52
圖表 32資源搜尋階段- VERIFYREPLY 53
圖表 33資源分享階段-上傳或送出資訊 54
圖表 34資源分享階段-下載或取得資訊 54
圖表 35整體流程圖 57
圖表 36其它文章的存取控制流程 64
[ 1 ]Dan Boneh ,Matthew Franklin “Identity-Based Encryption from the Weil Pairing”Crypto 2001, LNCS 2139
[ 2 ]Muhammad Bohio, Ali Miri “AUTHENTICATED SECURE CMMUNICATIONS IN MOBILE AD HOC NETWORKS” Page 1 CCECE 29-CCGEI 29, Niagara Falls, May/mai 2004
[ 3 ] EM Belding-Royer “Multi-Level Hierarchies for Scalable Ad hoc Routing” Wireless Networks, 28 – Springer
[ 4 ]Muhammad Bohio, Ali Miri, “An Authenticated Broadcasting Scheme for Wireless Ad hoc Network” Electrical and Computer Engineering, 2004. Canadian
[ 5 ]Balfanz, D. Durfee, G. Shankar, N. Smetters, D. Staddon, J. Hao-Chi Wong “Secret Handshakes from Pairing-Based Key agreements” Security and Privacy, 2003. Proceedings. 2003 Symposium on
[ 6 ]Stefano Campadello “Peer-to-Peer Security in Mobile Devices: a User Perspective” Proceedings of the Fourth International Conference on Peer-to-Peer Computing, 2004
[ 7 ]Luiz A. DaSilva, Scott F. Midkiff, Jahng S. Park, George C. Hadjichristofi, and Nathaniel J. Davis, Virginia “Network Mobility and Protocol Interoperability in Ad Hoc Networks” IEEE Communications Magazine • November 2004
[ 8 ]E. Damiani S. De Capitani di Vimercati S. Paraboschi P. Samarati “Managing and Sharing Servents'' Reputations in P2P Systems” IEEE TRANSACTIONS ON KNOWLEDGE AND DATA ENGINEERING, 2003
[ 9 ]H Deng,D P Agrawal.”TIDS:threshold and identity-based security scheme for wireless ad hoc networks”.IEEE Ad Hoc Networks,2004;2 : 291 ∼307
[ 10 ]Hongmei Deng, Anindo Mukherjee, and Dharma P. Agrawal “Threshold and Identity-based Key Management and Authentication for Wireless Ad Hoc Networks” Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC’04)
[ 11 ]Klas Fokine “Key Management in Ad Hoc Networks” Key Management in Ad Hoc Networks, ISRN LITH-ISY-EX-3322-27
[ 12 ]Md. Shariful Islam, Matei Ciobanu Morogan “Efficient Key Management Scheme for Mobile Ad Hoc Network” Efficient Key Management Scheme for Mobile Ad Hoc Network
[ 13 ]Aram Khalili, Jonathan Katz, William A. Arbaugh “Toward Secure Key Distribution in Truly Ad-Hoc Networks ” Proceedings of the 2003 Symposium on Applications and the Internet Workshops(SANINT-w’03)
[ 14 ]J Kong, P Zerfos, H Luo, S Lu, L Zhang “Providing Robust and Ubiquitous Security Support for Mobile Ad-Hoc Networks” 2001 International Conference on Network Protocols ICNP, 2001
[ 15 ]SL Keoh, E Lupu, M Sloman “PEACE: A Policy-based Establishment of Ad-hoc Communities” Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC''04) - Volume 00
[ 16 ]Kong, J., Zerfos, P.,Luo,H., Lu, S., Zhang, L.”Providing Robust and Ubiquitous Security Support for MANET”, IEEE 9th International Conference on Network Protocols (ICNP).(2001)
[ 17 ]Haiyun Luo, Member, IEEE, Jiejun Kong, Student Member, IEEE, Petros Zerfos, Student Member, IEEE, Songwu Lu, Member, IEEE, and Lixia Zhang, Senior Member, IEEE “URSA: Ubiquitous and Robust Access Control for Mobile Ad Hoc Networks” IEEE/ACM TRANSACTIONS ON NETWORKING 2004
[ 18 ]Keun-Ho Lee, Heyi-Sook Sub, Sang-Bum Han, SangKeun Lee, Chong-Sun Hwang “An Authentication Protocol Based on CBRP in Ad Hoc Network” Advanced Communication Technology, 29. The 6th International Conference on
[ 19 ]Kristin Lauter, Microsoft Corporation, “THE ADVANTAGES OF ELLIPTIC CURVE CRYPTOGRAPHY FOR WIRELESS SECURITY” IEEE Wireless Communications Feb 2004
[ 20 ]B Lu, UW Pooch “A Lightweight Authentication Protocol for Mobile Ad Hoc Networks” Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC''05) - Volume II - Volume 02
[ 21 ]William D. Neumann “HORSE: An Extension of an r-Time Signature SchemeWith Fast Signing and Verification” Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC’04)
[ 22 ]A Perrig, R Canetti, JD Tygar, D Song “The TESLA Broadcast Authentication Protocol” RSA CryptoBytes, 2002
[ 23 ]N. Ruangchaijatupon and P. Krishnamurthy “Encryption and Power Consumption in wireless LANs” Third IEEE Workshop on Wireless LANs, Newton, Massachusetts, 2001
[ 24 ]Nitesh Saxena, Gene Tsudik, Jeong Hyun Yi “Admission Control in PeertoPeer: Design and Performance Evaluation ” 2003 ACM
[ 25 ]Nitesh Saxena, Gene Tsudik, Jeong Hyun Yi “Experimenting with Admission Control in P2P” Computer Security in the 21st Century, Springer, 2005
[ 26 ]Adi Shamir, SangKeun Lee, Chong-Sun Hwang “How to Share a Secret” 1979 ACM
[ 27 ]Maria Striki, John S. Baras “Towards Integrating Key Distribution with Entity Authentication for Efficient, Scalable and Secure Group Communication in MANETs” IEEE Communications Society,2004
[ 28 ]Z Swiderski “Content Control in Multimedia Applications” Conference on Human Factors in Computing Systems, 26
[ 29 ]Nitesh Saxena, Gene Tsudik, Jeong Hyun Yi, “Identity-based Access Control in Ad Hoc Groups”, Proceedings of the 2004International Workshop on Hot Topics in Peer-to-Peer Sysytems (HOT-P2P’04)
[ 30 ]Dimitrios Tsesmetzis, Manolis Solidakis, Vassilios Stathopoulos, Nikolaos Mitrou “Distributed Search in P2P Networks through Secure-Authenticated Content Management Systems(CMSs)” Proceedings of the Fourth International Conference on Peer-to-Peer Computing, 2004
[ 31 ]B Wu, J Wu, EB Fernandez, S Magliveras “Secure and Efficient Key Management in Mobile Ad Hoc Networks ” 19th IEEE International Parallel and Distributed Processing Symposium (IPDPS''05) - Workshop 17 p. 288a
[ 32 ]Bin Xie ,Anup Kumar “A Framework for Integrated Internet and Ad hoc Network Security ” 2004 IEEE
[ 33 ]Bo Xing “Power Consumption of Security Measures in Mobile Devices” ICS243G-Network and Computer Security
[ 34 ]Hao Yang, Haiyun Luo, Fan Ye, Songwu Lu, and Lixia Zhang ,“SECURITY IN MOBILE AD HOC NETWORKS: CHALLENGES AND SOLUTIONS ” IEEE Wireless Communications , February 2004
[ 35 ]Eun-Jun Yoon, Eun-Kyung Ryu, and Kee-Young Yoo “Further Improvement of an Efficient Password Based Remote User Authentication Scheme Using Smart Cards” IEEE TRANSACTIONS ON CONSUMER ELECTRONICS, 2004
[ 36 ]Stephen S. Yau and Xinyu Zhang, “A Middleware Service for Secure Group Communication in Mobile Ad Hoc Networks” Computer Software and Applications Conference, 2003. COMPSAC
[ 37 ]Yanchao Zhang, Wenjing Lou, Yuguang Fang “SIP: A Secure Incentive Protocol against Selfishness in Mobile Ad Hoc Networks ” WCNC 2004 / IEEE Communications Society
[ 38 ]Muxiang ZHANG “Further Analysis of Password Authenticated Key Exchange Protocol Based on RSA for Imbalanced Wireless Networks” Applied Cryptography and Network Security: Second International Conference, ACNS 2004 Yellow Mountain, China, June 8-11, 29. Proceedings
[ 39 ]Sencun Zhu, Sanjeev Setia, Shouhuai Xu Sushil Jajodia “GKMPAN: An Efficient Group Rekeying Scheme for Secure Multicast in Ad-Hoc Networks” Proceedings of the First Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services(MobiQuitous’04)
[ 40 ]L Zhou, ZJ Haas “Securing Ad Hoc Networks” IEEE NETWORK, 1999
[ 41 ]F Zhu, M Mutka, L Ni “Facilitating secure ad hoc service discovery in public environment” COMPSAC-NEW YORK-, 28
[ 42 ]賴溪松、韓亮、張真誠 ,”近代密碼學及其應用” ,近代密碼學及應用 P14-10~14—16
[ 43 ]劉興華、黃景彰,”執行權管制系統的設計標準—ISO/IEC 1211-3介紹”, http://www.iicm.org.tw/communication/c2_3/page04.doc
[ 44 ]”移動自組織網路:無需基礎設施的點對點通信 ”, http://www.gzit.gov.cn/_webnews/view.asp?id=XW21465143172147
[ 45 ]“The Gnutella Protocol Specification v0.4 Document Revision .2“ , http://www.clip2.com
[ 46 ]Dr. Gene Tsudik ,Jeong H. Yi, Nitesh Saxena,”Peer Group Admission Control”http://sconce.ics.uci.edu/gac/
[ 47 ]Robert H''obbes'' Zakon,” Hobbes'' Internet Timeline v4.0”, http://www.zakon.org/robert/internet/timeline/HIT-big5.html
QRCODE
 
 
 
 
 
                                                                                                                                                                                                                                                                                                                                                                                                               
第一頁 上一頁 下一頁 最後一頁 top
無相關論文
 
1. 陳德人、毛家舲(2000):臺灣地區與美國華裔新生兒的低出生體重和早產比率。臺灣醫界:43:5頁39-40。
2. 張素娟、郭素珍(2003):照顧一位雙胞胎母親產後坐月子期間哺餵母乳之經驗。助產雜誌46頁72-79。
3. 郭素珍(1984):談雙胞胎母親喂母奶的問題與處理方法。護理雜誌:33:1頁99-103.
4. 韓文蕙、陳麗美、李中一(2003):Incidences of and Predictors for Preterm Births and Low Birth Weight Infants in Taiwan。中華職業醫學雜誌:10:3頁131-141。
5. 謝燦堂(1998):誰是早產高危險群。財團法人中華民國早產兒基金會會訊:28頁11-13。
6. 潘懿真、謝功毅、陳保中(1999):早產兒危險因子之探討--社區性病例對照研究。中華公共衛生雜誌:18:6頁460-465。
7. 劉桂霞、李鴻森(1999):懷孕週數與低出生體重及極低出生體重嬰兒盛行率之研究。中山醫學雜誌:10:1頁29-33。
8. 黃玉苹(2002):雙胞胎同床照護。護理雜誌49:5頁91-95。
9. 傅瓊瑤、陸振翮、吳欣玫、王銘賢、陳淑貞(1999):青少女懷孕發生低出生體重與早產的危險性探討。中華公共衛生雜誌:18:3頁228-234。
10. 高森永(2000):早產之相關因素探討。國防醫學:31:2頁149-153。
11. 高森永(2000):低出生體重之相關因素探討。國防醫學: 31:1頁67-71。
12. 徐金源(1998):臺灣之早產概況。財團法人中華民國早產兒基金會會訊:26 頁9-12。
13. 祁安美、戈依莉(2004):雙胞胎的母育角色與調適。長庚護理15:4=48 頁430-435。
14. 李佩珍、郭素珍、鄧森文、呂宗學、李中一(2003):臺灣地區嬰兒出生體重與妊娠週數分佈之長期變化趨勢。臺灣公共衛生雜誌:22:5頁376-385。