Efficient & Reliable Transportation of Consigments (ERTOC)

高效的

• 批准号: TS/I000291/1
• 负责人: Siraj Ahmed Shaikh
• 金额: $ 14.03万
• 依托单位: Coventry University
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2010
• 资助国家: 英国
• 起止时间: 2010 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=TS%2FI000291%2F1
• 关键词: Efficient; Reliable; Transportation; Consigments; ERTOC

This team is largely responsible for information security and assurance aspects of the proposed system, particularly with regards to data collection (from a variety of sources), storage (in a central data hub), and provision of access to the data (through the proposed open API). The proposed effort will investigate and evaluate technical and procedural mechanisms to ensure that: (1) access to the central data hub is authorised and strictly monitored for operational conformity. Protocols, based on mutual authentication, and access logging, for non-repudiation, will be designed and evaluated, (2) anonymity and privacy of consignments, drivers and vehicles is maintained. This may involve forcing partial and restricted views of the central hub upon access, and where strictly necessary for the purposes of application, pseudonymity is used to provide a coherent view of data, (3) all forms of networked communication are authenticated, and preserve confidentiality where necessary. Both collection of vehicle data and access to the central hub by various stakeholders is to be protected as such. Industry standard protocols such as IPSec, SSH and SSL, providing such measures over Internet Protocol (IP) will be evaluated for purpose, and finally (4) the system is designed to provide configurable access to data that is both comprehensive and flexible, with a view to providing administrators of the system to control and mediate access. Procedural mechanisms will be proposed for periodic reviews of information security to help administrators change and optimise access as and when necessary. Once the system is implemented and ready for trial, the team will undertake purpose-designed penetration tests to validate the system against any vulnerabilities, particularly due to the underlying operating system and application platforms. Such tests should serve to provide confidence in the rigorous design and implementation of the system.

该小组主要负责拟议系统的信息安全和保证方面，特别是在数据收集(从各种来源)、存储(在中央数据中心)和提供数据访问(通过拟议的开放API)方面。拟议的工作将调查和评价技术和程序机制，以确保：(1)对中央数据中心的访问得到授权，并严格监测其业务符合性。基于相互认证和访问记录的协议将被设计和评估，以实现不可否认性，(2)保持托运、司机和车辆的匿名性和隐私。这可能涉及在访问时强制中央集线器的部分和受限视图，在为应用目的而严格必要的情况下，使用假名来提供数据的一致视图，(3)所有形式的联网通信都经过验证，并在必要时保持机密性。不同利益攸关方对车辆数据的收集和对中央枢纽的访问都将受到保护。将对通过互联网协议(IP)提供此类措施的行业标准协议(如IPSec、SSH和SSL)进行评估，最后(4)系统旨在提供对数据的可配置访问，既全面又灵活，以期为系统管理员提供控制和调解访问。将提出定期审查信息安全的程序机制，以帮助管理员在必要时改变和优化访问。一旦系统实施并准备好试用，团队将进行专门设计的渗透测试，以验证系统是否存在任何漏洞，特别是由于底层操作系统和应用程序平台的原因。这类测试应有助于使人们对该系统的严格设计和实施充满信心。

项目成果

Efficient and Reliable Transportation of Consignments (ERTOC)

高效可靠的货物运输 (ERTOC)

• DOI: 10.4018/jal.2012040104
• 发表时间: 2012
• 期刊: International Journal of Applied Logistics
• 作者: Akhtar J

Information Technology and Open Source: Applications for Education, Innovation, and Sustainability - SEFM 2012 Satellite Events, InSuEdu, MoKMaSD, and OpenCert Thessaloniki, Greece, October 1-2, 2012 Revised Selected Papers

信息技术和开源：教育、创新和可持续发展的应用 - SEFM 2012 卫星活动、InSuEdu、MoKMaSD 和 OpenCert 塞萨洛尼基，希腊，2012 年 10 月 1-2 日修订的精选论文

• DOI: 10.1007/978-3-642-54338-8_24
• 发表时间: 2014
• 作者: Kalutarage H