Research on Environment-Driven Secure Network Systems

本研究项目将普适计算环境下的安全与隐私研究问题分为五个研究主题。这五个主题的研究成果总结如下：1。基于用户站点的隐私保护架构EMAPP提出了基于封装移动代理的隐私保护架构EMAPP，该架构允许移动代理迁移到用户系统的隐私胶囊中，通过参考胶囊中保存的个人数据执行必要的流程。只有计算结果才允许流向外界。由于胶囊禁止个人数据从胶囊中泄漏，EMAPP实现了强大的隐私保护。面向可信第三方的隐私保护架构iCOP提出了另一种隐私保护架构iCOP，该架构允许每个包含用户个人数据的移动代理迁移到可信第三方的代理平台中，并根据带入平台的个人数据执行必要的流程。只有计算结果才允许流向外界。由于计算结果由平台检查，以避免任何个人数据泄露给外界，iCOP提供了另一种鲁棒性隐私保护的解决方案。iCOP体系结构在多方计算问题中的应用提出了一种基于移动代理的会议调度方案EPMS和一种隐私度量标准Min度量。安全策略是针对iCOP平台设计的。这些策略可以有效地保护隐私，同时解决许多多方计算问题。针对无线自组网中中继节点将数据包从源节点转发到目的节点的情况，提出了一种基于价格需求函数的激励模型（PDM）。在PDM模型中，网络被建模为一个市场，其中定价由源节点的需求和中继节点的服务供给决定。提出了一种基于分布式上下文变化检测机制的上下文感知访问控制体系结构ACA2，即使服务提供者和服务用户之间没有建立基于信任的关系，也可以根据当前上下文动态更改访问权限。该体系结构具有以下特点：(1)临时使用，(2)检测上下文更改的可扩展机制，以及(3)提供可信上下文。少

This research project divides the research issues on security and privacy in the ubiquitous computing environment into five research themes. The research results of these five themes are summarized as follows.1.User Site-Oriented Privacy Protection Architecture EMAPPThe Encapsulated Mobile Agent-Based Privacy Protection architecture EMAPP is proposed that allows mobile agents to migrate into the privacy capsule of a user system, execute necessary processes by referring to the personal data kept in the capsule. Only the computational results are allowed to flow out to the outside world. As personal data are prohibited by the capsule to leak out from the capsule, EMAPP achieves a robust privacy protection.2.Trusted Third Party-Oriented Privacy Protection Architecture iCOPAnother privacy architecture called iCOP is proposed that allows mobile agents, each containing user's personal data, to migrate into the agent platform of a trusted third party, execute necessary processes by referring … More to the personal data brought into the platform. Only the computational results are allowed to flow out to the outside world. As the computational results are checked by the platform to avoid that any personal data will leak out to the outside world, iCOP provides another solution for robust privacy protection.3.Application of iCOP Architecture to Multi-party Computation ProblemsA mobile-agent-based meeting scheduling scheme called EPMS and a privacy measurement metric called Min metric are proposed. The security policies are devised for the iCOP platform. These policies can effectively protect privacy while solving many multi-party computation problems.4.An Incentive Mechanism to Promote Node Cooperation in Wireless Ad Hoc NetworksA price-demand function based incentive model (PDM) is proposed for wireless ad hoc network in which relay nodes forward the packets from a source node to a destination node. In the PDM model, the network is modeled as a market, where the pricing is determined by the source node's demand and the relay node's service supply.5.A Context-Aware Access Control Architecture ACA2 for Ubiquitous ServicesA context aware access control architecture ACA2 is proposed, based on a distributed context-change detection mechanism that can dynamically change access rights according to current context even if a trust-based relationship has not been formed between a service provider and a service user. This architecture features (1) ad-hoc use, (2) scalable mechanism for detecting context changes, and (3) provision of trusted context. Less