基于情境感知的移动互联网安全认证技术研究

移动互联网(MI)的出现改变了传统的商业模式、办公形式和生活方式，但其安全保障将成为能否长远发展的重要因素。.认证是网络安全中最关键最基础的问题，本项目拟结合MI的需求，以情境感知为设计主线，从终端认证、接入认证、通信认证三个方面进行研究。针对移动终端易被盗的特点，提出动态演化情境感知的隐式重认证方法，防止设备中的隐私信息被未授权用户窃取。考虑到MI用户数量大、管理中心易成为安全瓶颈，设计基于情境感知的快速接入认证算法，通过同态签名和无效消息定位技术，解决安全数据风暴及虚假消息攻击的问题。结合MI的无线信道、热点互联的特点，提出基于编码感知的认证与隐私保护技术，解决安全性与效率冲突问题，并保护传输数据的私密性。最后，设计高效的MI安全实验平台，验证提出的算法与协议。.本项目将丰富网络安全基础理论，为MI高效安全认证研究提供新视野，为MI长期可持续发展提供理论指导和技术支持。

Mobile Internet(MI) changes the traditional business model, office style and life style. The security assurance is a key factor for its long-term development.. Authentication is one of the most critical and basic problems in network security. In this project, considering the context-aware ability, we plan to research three aspects including mobile phone authentication, access authentication, and communication authentication. Because mobile phones are easy to be stolen, we attempt to propose dynamic evolution implicit re-authentication method based on context-aware to prevent illegal users from stealing privacy information. Considering the management bottleneck introduced by massive users, we utilize homomorphic signature and invalid message location algorithms based on the network context to design quick response access authentication methods which can resist secure data storm and false message attacks. Towards the characteristics of wireless channel and hotspot interconnection, we design the secure coding-aware algorithm and privacy-preserving technology. These algorithms can effectively protect the security and privacy of communications. At last, we will develop the experiment platform of MI to verify the proposed algorithms and protocols.. The project will promote the basic theory of network security and provide new horizons for efficient secure authentication. Furthermore, it can provide theoretical direction and technology support for long-term development of MI.