臺灣博碩士論文加值系統

近年來，在許多國家中，登山運動越來越普及化，但卻存在著許多登山客因為登山而遭遇危險之問題。因此，我們提出一種基於雲端運算的架構設計一套以快速回應SOS急救之突發事件發生之應變系統。我們基於雲端運算建立一種急救平台，並且結合移動通訊設備的移動性以及方便通訊之特性，受傷人員可以快速的送出SOS訊息給幫助者。此架構為基於 Schnorr 簽章方法讓受傷人員可以透過代理授權給幫助者的方式向醫院提出掛號，在方法中也整合了對稱式加密技術、訊息驗證碼以及 RFC 2631來抵擋已知的攻擊，並且達到代理簽章的相關安全需求。最後，我們分析運算和通訊成本來證明我們的系統適合應用在一個緊急事件回報及求救系統中。

In recent years, the sport of mountaineering has become more and more popular in many countries, and people may encounter danger when mountaineering. In this paper, we propose a cloud-computing-based architecture to respond rapidly to an SOS emergency event requiring first aid. Our scheme constructed an aid platform based on cloud computing. Based on the features of mobile devices, such as mobility and convenient communication, the injured party/patient can quickly send an SOS to the helper. The proposed scheme can accomplish the proxy authorization of the Schnorr signature from the patient. It also integrates symmetric encryption technology, message authentication code (MAC), and RFC 2631 to defend against known attacks, and achieve the security requirements provided by proxy signature. Finally, we analyze the performance cost to determine whether our scheme is suitable for implementation in an emergency response and SOS system.

TABLE OF CONTENTS
致謝 ...................................................................................................................... V
中文摘要 ........................................................................................................... VII
ABSTRACT ................................................................................................... VIII
TABLE OF CONTENTS .................................................................................. IX
LIST OF TABLES ............................................................................................. XI
LIST OF FIGURES ......................................................................................... Chapter 1 Introduction ....................................................................................... 1
1.1 Background ......................................................................................... 1
1.2 The research motives ......................................................................... 2
1.3 Reviewing the Schnorr signature ...................................................... 6
Chapter 2 Our protocol ....................................................................................... 8
2.1 Construct session key model ........................................................... 12
2.2 Registration phase ............................................................................ 13
2.3 Login phase ....................................................................................... 15
2.4 Delegation phase ............................................................................... 16
2.5 Signing and verification phase ........................................................ 19
2.6 Password change phase ................................................................... 23
Chapter 3 Security analysis .............................................................................. 25
3.1 Defend against known attacks ........................................................ 25
3.1.1 Defend tampering attack ....................................................... 25
3.1.2 Defend denial-of-service (DoS) attack ................................. 26
3.1.3 Defend replay attack .............................................................. 26
3.1.4 Defend man-in-the-middle attack ........................................ 27
3.1.5 Defend password guessing attack ......................................... 27
3.1.6 Defend mobile device lost attacks ......................................... 28
3.2 Verifiability issue .............................................................................. 28
3.3 Unforgeability issue .......................................................................... 29
3.4 Non-repudiation issue ...................................................................... 29
3.5 Non-designated issue ........................................................................ 31
3.6 Identifiability issue ........................................................................... 31
3.7 Privacy revocation issue .................................................................. 32
Chapter 4 Performance analysis ...................................................................... 33
4.1 To compare cloud server with general server ................................ 37
Chapter 5 Conclusions ...................................................................................... 39
References .......................................................................................................... 41
Appendix 作者簡介 .......................................................................................... 45
LIST OF TABLES
Table 1 The non-repudiation proofs of each phase ........................................ 30
Table 2 The computation cost of our scheme .................................................. 33
Table 3 The communication cost of WiMAX part ......................................... 36
Table 4 The communication cost of the Ethernet part .................................. 36
Table 5 To compare cloud server and general server .................................... 37
LIST OF FIGURES
Figure 1 Cloud computing types ........................................................................ 3
Figure 2 The architecture of our scheme .......................................................... 9
Figure 3 Overview of the registration phase ................................................... 14
Figure 4 Overview of the login phase .............................................................. 15
Figure 5 Overview of the delegation phase ..................................................... 17
Figure 6 Overview of the signing and verification phase .............................. 20

[1]Sport England: Primary Offer Data Information Pack for Mountaineering, website: http://www.sportengland.org/, Access available 5/31/2011.
[2]Chinese Taipei Mountaineering Association, website: http://www.alpineclub.org.tw/tier/front/bin/ptdetail.phtml?Part=tmd-2&Category=100106706, Access available 6/14/2011.
[3]M.A.Vouk, “Cloud Computing – Issues, Research and Implementations,” IEEE International Conference on Information technology Interfaces, 2008, pp. 31-40.
[4]K. Beaty, A. Kochut and H. Shaikh, “Desktop to Cloud Transformation Planning,” IEEE International Symposium on, Parallel & Distributed Processing, 2009, pp. 1-8.
[5]B. Ohlman, A. Eriksson and R. Rembarz, “What Networking of Information Can Do for Cloud Computing,” IEEE International Workshops on Enabling Technologies: Infrastructures for Collaborative Enterprises, 2009, pp. 78-83.
[6]Sun Microsystems, Inc. “Introduction to Cloud Computing Architecture,” website: http://webobjects.cdw.com/webobjects/media/pdf/Sun_Cloud Computing.pdf, Access available 6/14/2011.
[7]H. Li, J. Sedayao, J. Hahn-Steichen, E. Jimison, C. Spence and S. Chahal, “Developing An Enterprise Cloud Computing Strategy,” Intel Corporation, 2009, pp. 1-16.
[8]P. Mell and T. Grance, “The NIST Definition of Cloud Computing,” National Institute of Standards and Technology, 2009, pp.1-2.
[9]I. Muttik and Chris. Barton, “Cloud Security Technologies,” Information Security Technical Report, 2009, pp. 1-6.
[10]W. Itani, A. Kayssi, and A. Chehab, Privacy as a Service Privacy-Aware Data Storage and Processing in Cloud Computing Architectures, IEEE International Conference on Dependable, Autonomic and Secure Computing, 2009, pp. 711-716.
[11]K. Hwang, S. Kulkareni, and Y. Hu, “Cloud Security with Virtualized Defense and Reputation-Based Trust Management,” IEEE International Conference on Dependable, Autonomic and Secure Computing, 2009, pp. 717-722.
[12]S. Berger, R. Caceres, K. Goldman, D. Pendarakis, R. Perez, J.R. Rao, E. Rom, R. Sailer, W. Schildhauer, D. Srinivasan, S. Tal, and E. Valdez “Security for the Cloud Infrastructure-Trusted Virtual Data Center Implementation,” IBM Journal of Research and Development, 2009, Vol. 53, pp. 6:1-6:12.
[13]M. Mambo, K. Usuda, and E. Okamoto, “Proxy Signature: Delegation of the Power to Sign Message,” In IEICE Trans. Fundamentals, 1996, Vol. E79-A, No. 9, pp. 1338-1353.
[14]B. Lee, H. Kim, and K. Kim, “Strong Proxy Signature and Its Application,” Proceedings of SCIS2001, 2001, pp. 603–608.
[15]C.P. Schnorr, “Efficient Signature Generation by Smart Cards,” Journalofcryptology, 1991, Vol. 4, No. 3, pp161–174.
[16]B. Lee, H. Kim and K. Kim, “Strong Proxy Signature and Its Applications,” International Conference in Information and Communications Security, Lecture Notes in Computer Science, 2001, pp. 223–232.
[17]R. Rivest, A. Shamir, and L. Adleman, “A Method for Obtaining Digital Signatures and Public-Key Cryptosystems,” Magazine Communications of the ACM, 1978, Vol. 21. pp. 120–126.
[18]T. ElGamal, “A Public-Key Cryptosystem and A Signature Scheme Based on Discrete Logarithms,” IEEE Transactions on Information Theory, 1985, Vol. 31, pp. 469–472.
[19]W. Diffie and M.E. Hellman, “New directions in cryptography,” IEEE Transactions on Information Theory, 1976, Vol. 22, pp. 644–654.
[20]Internet Engineering Task Force (IETF) Working Group, “Diffie–Hellman Key Agreement Method (RFC 2631), 1999, website: http://www.ietf.org/rfc/rfc2631.txt, Access available 6/14/2011.
[21]HTC product, 2011, website: http://www.htc.com/hk-en/product/desirehd/ specification. html, Access available 6/14/2011.
[22]M. F. Finneran dBrn Associates, Inc, “WiMax Versus Wi-Fi,”2001, website:http://media.techtarget.com/searchMobileComputing/downloads/Finneran.pdf, Access available 6/14/2011.
[23]LAN/MAN Standards Committee of the IEEE computer Society,“802.3ba-2010 IEEE Standard for Information technology-Telecommunications and Information Exchange Between Systems-Local and Metropolitan Area Networks-Specific Requirements Part 3: Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Access Method and Physical Layer Specifications Amendment 4: Media Access Control Parameters, Physical Layers and Management Parameters for 40 Gb/s and 100 Gb/s Operation,” 2010, pp. 1-457.