改进的Kerberos协议在建筑扬尘污染监控平台中的应用  

Application of improved Kerberos protocol in construction dust pollution monitoring platform

作　　者：贾淑红[1,2] 刘建军[1] 项新建[2] 

机构地区：[1]浙江建设职业技术学院,浙江杭州311231 [2]浙江科技学院信息与控制研究所,浙江杭州310023

出　　处：《辽宁工程技术大学学报（自然科学版）》2012年第2期232-235,共4页Journal of Liaoning Technical University (Natural Science)

基　　金：住房和城乡建设部科学技术计划资助项目(2011-R3-16)

摘　　要：为了解决建筑扬尘污染监控平台的网络安全问题,平台采用了安全强度较高的kerberos实体身份验证协议;并对其认证方案做了详细分析,针对不足建立一个改进的Kerberos协议模型.改进后的Kerberos协议在平台身份确认信息中加入了属性证书,更好地将实施融合到现有的系统机制中;调换了Kerberos协议中用户与服务提供者的身份,保证了原有安全机制不受影响,在一定程度上提高了身份认证系统的安全性.实验结果表明:改进后的Kerberos协议模型彻底解决了平台实施过程中的安全问题,对建筑扬尘污染监控平台的建设具有一定的理论意义和实际应用价值.In order to solve the network security problems associated with the construction site dust pollution monitoring platform,this study proposes that the platform adopts the highly safe Kerberos entity authentication protocol.In addition,the certification scheme is analyzed in detail and an improved Kerberos protocol model is established to overcome its insufficiency.In the improved Kerberos protocol,the attribute certificate is added into platform identification information,which enables it to be better implemented in existing system mechanism.Furthermore,the replacement of the identities of users and service providers in the Kerberos protocol warrants the intrinsic safety mechanism is not affected,to a certain extent the identity authentication system security is improved.The experimental results show that the improved Kerberos protocol model completely solves the safety issues during the platform implementation process.It has certain theoretical significance and practical value for building a construction site dust pollution monitoring platform.

关 键 词：KERBEROS协议 建筑扬尘污染 认证方案 属性证书 身份认证 安全机制 协议模型 监控平台 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]