基于可信隐式第三方的机载软件审计方法  

Airborne Software Audit Method Based on Trusted Implicit Third Party

作　　者：岳猛 朱世博 洪雪婷 段冰艳 YUE Meng;ZHU Shibo;HONG Xueting;DUAN Bingyan(School of Safety Science and Engineering,Civil Aviation University of China,Tianjin 300300,China;School of Electronic Information and Automation,Civil Aviation University of China,Tianjin 300300,China)

机构地区：[1]中国民航大学安全科学与工程学院,天津300300 [2]中国民航大学电子信息与自动化学院,天津300300

出　　处：《计算机科学》2024年第S01期1030-1035,共6页Computer Science

基　　金：国家自然科学基金(62172418,U1933108,U2133203);天津市自然科学基金(21JCZDJC00830);天津市教委科研计划项目(2019KJ117)。

摘　　要：分布式云存储技术为数量日益庞大的机载软件提供了新的分发与存储方式,这意味着航空公司失去了对软件的直接控制,因此机载软件安全成为了航空公司十分关注的问题。为了提高云存储环境下机载软件的安全性,提出了一种基于可信隐式第三方(Trusted Implicit Third Party,TITP)的机载软件审计方法对云上机载软件进行监控与管理,以确保机载软件的完整性。此外,由部署在云端的可信硬件代替用户进行审计工作,解决了可公开验证审计机制中第三方审计者不完全可信的问题,并以日志的方式记录审计结果以供用户查询。运用可信硬件进行完整性验证不仅降低了用户计算成本,而且缩短了用户在线时间。与其他可信隐式第三方审计方法进行实验对比,所提方法在审计计算过程中节省了10%的时间消耗。The distributed cloud storage technology provides a new distribution and storage method for an increasingly large number of airborne software.This means that airlines have lost direct control over the software,therefore the security of airborne software has become one of the most concerned issue of airlines.In order to improve the security of airborne software in the cloud storage environment,an airborne software audit method based on trusted implicit third party is proposed.Trusted hardware deployed in the cloud is used to audit instead of users,which solves the problem that the third party auditor is not completely trusted in the publicly verifiable audit mechanism,and records the audit results in the form of logs for users to query,which not only reduces users’computing costs,but reduces users’online time.Compared with other trusted implicit third party audit methods,it saves 10%of the time consumption in the audit calculation process.

关 键 词：机载软件 云存储 可信隐式第三方 审计方法 日志 

分 类 号：V328.3[航空宇航科学与技术—人机与环境工程]