论文部分内容阅读
为实现分级防火墙系统中多点间的动态访问控制,针对该系统具有的等级树特点,提出了基于索引树的分级访问控制方法.将各防火墙模块用树节点表示,并为其建立合适的索引,再用单向函数为各节点计算相应的密钥,然后按照密钥进行分级访问控制.单向函数的选取直接影响到整个系统的安全性,本文提出了利用PGM加密系统作为单向函数的解决方法,并对该方案的安全性进行了分析,证明了该方案既可抵御已知明文或密文的攻击,也能抵御兄弟节点间勾结对其他节点的攻击.
In order to realize the dynamic access control among multiple points in hierarchical firewall system, a hierarchical access control method based on index tree is proposed according to the characteristics of the hierarchical tree of the hierarchical firewall system. Each firewall module is represented by a tree node and a suitable index , And then use the one-way function to calculate the corresponding key for each node, and then carry on the hierarchical access control according to the key.The selection of one-way function has a direct impact on the security of the whole system. In this paper, the PGM encryption system is proposed as a one-way function The solution and the security analysis of the scheme prove that the scheme not only can resist known plaintext or ciphertext attack, but also can resist the brother nodes colluding to attack other nodes.