基于零信任安全模型的轨道交通数据隐私保护  

Privacy protection of rail transit data based on zero⁃trust security model

作　　者：汤宇为 TANG Yuwei(Beijing Mass Transit Railway Operation Co.,Ltd.,Beijing 100035,China)

机构地区：[1]北京市地铁运营有限公司,北京100035

出　　处：《电子设计工程》2024年第1期187-190,195,共5页Electronic Design Engineering

摘　　要：为解决轨道交通网络数据传输杂乱的问题,提升数据样本的安全性,研究基于零信任安全模型的轨道交通数据隐私保护方法。在零信任安全模型的基础上,分别定义公钥密码与私钥密码模板,建立完整的轨道交通数据隐私链路标签。完善数据样本验证机制以提升数据安全性,通过求解交互认证系数的方式辨别隐私数据样本,结合敏感度指标实现轨道交通数据隐私保护。实验结果表明,在轨道交通网络中应用零信任安全模型,可在保证正序数据传输速率的同时将乱序数据传输速率限制在3.52 Mb/ms以下,能够满足轨道交通数据隐私保护的应用需求。In order to solve the problem of chaotic data transmission in rail transit network and improve the security of data samples,this paper studies the privacy protection method of rail transit data based on zero⁃trust security model.Based on the zero⁃trust security model,the public key cipher and private key cipher templates are defined respectively,and the complete private link label of rail transit data is established.The validation mechanism of data samples is improved to improve data security.Privacy data samples are identified by solving interactive authentication coefficient,and the privacy protection of rail transit data is realized by combining sensitivity index.The experimental results show that the application of zero trust security model in rail transit network can limit the transmission rate of out of sequence data to below 3.52 Mb/ms while ensuring the transmission rate of positive sequence data,which can meet the application needs of rail transit data privacy protection.

关 键 词：零信任安全模型 轨道交通数据 隐私保护 公钥密码 私钥密码 交互认证系数 

分 类 号：TN918[电子电信—通信与信息系统]