一种基于任务和可信等级的数控网络跨域互操作方法  

A Cross-Domain Interoperability Method of Distributed Numerical Control Network Based on Task and Trust Level

作　　者：秦元庆[1,2] 董泽阳 韩汶君 QIN Yuanqing;DONG Zeyang;HAN Wenjun(School of Artificial Intelligence and Automation,Huazhong University of Science and Technology,Wuhan 430074,China;Image Processing and Intelligent Control,Ministry of Education,Huazhong University of Science and Technology,Wuhan 430074,China)

机构地区：[1]华中科技大学人工智能与自动化学院,武汉430074 [2]华中科技大学图像信息处理与智能控制教育部重点实验室,武汉430074

出　　处：《信息网络安全》2024年第8期1143-1151,共9页Netinfo Security

基　　金：国家重点研发计划[2021YFB2012201]。

摘　　要：随着工业4.0不断深化,数控网络不断开放导致网络攻击的可达性,使其面临巨大的安全风险。传统跨域互操作方法存在对访问主体认证客观性不足、任务执行效率低及身份权限分配粒度不够精确的问题。针对这些问题,文章提出一种基于任务和可信等级的数控网络跨域互操作方法,该方法通过可信计算3.0技术对访问主体进行可信评估,实现对访问主体的客观评价,提高跨域请求的安全性。文章同时提出一种互操作方法,以任务为互操作基础,在保障互操作细粒度安全性的同时,提高任务执行效率。仿真实验验证了该跨域互操作方法的有效性和适用性。With the continuous deepening of industry 4.0,the openness of distributed numerical control network has led to increased vulnerability to cyber-attacks.Traditional cross-domain interoperability models face issues such as insufficient objectivity in access subject authentication,low execution efficiency of tasks,and insufficient precision in identity and permission allocation.To address these challenges,this paper proposed a cross-domain interoperability method of distributed numerical control network based on task and trust level The method utilized trusted computing 3.0 technology to conduct a trustworthiness assessment of access subjects,objectively evaluated their trustworthiness and enhanced the security of cross-domain requests.Furthermore,this paper proposed a novel interoperability method,which was based on tasks to ensure fine-grained security during interoperation while also enhancing task execution efficiency.Simulation experiments validated the effectiveness and applicability of the proposed cross-domain interoperability method.

关 键 词：可信计算 跨域访问 互操作 任务 可信等级 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]