基于内容的发布/订阅系统安全框架设计  

Design of security framework for content-based publish-subscribe system

作　　者：邹吉昌[1] 段斌[1] 李晶[1] 

机构地区：[1]湘潭大学信息工程学院,湖南湘潭411105

出　　处：《计算机工程与设计》2008年第19期4926-4928,5128,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2007AA012476);国家自然科学基金项目(50677058)

摘　　要：发布/订阅作为分布式系统中一种松耦合、多对多的异步通信机制,有着广泛的应用前景。目前,人们主要对匹配算法、路由算法的性能、可表达性进行了深入的研究,其安全方面研究不足。因此,分析了发布/订阅系统的安全需求,设计了发布/订阅系统安全框架,并结合SRP协议,对框架中的身份认证机制、密钥管理机制、以及订阅成员的动态管理机制进行了详细的设计与分析,论证了该框架能满足发布/订阅系统的基本安全需求,具有实际应用价值。Publish-subscribe system, as a loosely-coupled, many-to-many asynchronous communication mechanism in distributed sys- tems, will be widely used in various areas. At present, some aspects of such systems have been the focus of intensive research, such as expression, performance of matching algorithms and routing algorithms. Little attention has been given to security issues. The security requirement of publish-Subscribe system based on content is analyzed, and then the security framework is designed. Some aspects of it, such as identity authentication, key management mechanism and dynamic subscriber membership management mechanism, are discussed and analyzed by combination with SRP protocol. Analyses show that the security framework meet the basic security requirement of current Publish-Subscribe system.

关 键 词：发布/订阅 身份认证 安全 密钥管理 密钥分发 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]