SPKI/SDSI 인증서를 이용한 Jini 기반의 안전한 이벤트 서비스 설계 및 구현
Design and implementation of Jini-based secure event service using SPKI/SDSI certificate
0
조회
0
다운로드
0
인용
0
참고문헌
초록
컴퓨팅 기기들이 점점 산재되고, 기기들의 이동성 또한 증가되면서, 동기적이고 직접적인 점대점 통신 모델은 여러 형태의 분산 컴퓨팅 환경에 적용하기에 적합하지 않다. 이벤트 서비스와 같은 간접통신 모델을 이용하면, 분산 환경에서의 응용들 사이의 결합도를 감소시키고 많은 정적인 요구들을 제거할 수 있는 이점이 있다. 본 논문에서는 신뢰할 수 있는 유비쿼터스 환경을 만들기 위해 Jini 기반의 안전한 이벤트 서비스를 설계하고 구현한다. 구현된 이벤트 서비스는 내용기반의 검색이 가능하고, 정당한 권한을 지닌 제공자와 소비자만이 이벤트를 주고받을 수 있도록 한다. 이벤트 서비스에 인증과 인가 기능을 제공하기 위해 SPKI/SDSI 인증서를 이용하고, 이벤트 제공자와 소비자의 분리, 이동기기의 연결 끊김 지원, 내용기반의 검색을 위해 Jini의 자바스페이스를 확장하여 구현한다.
Abstract
As computing devices become ubiquitous and increasingly mobile, it becomes obvious that a synchronous and direct peer-to-peer communication model is not sufficient in distributed computing environment. Using an indirect event service instead of other traditional communication model has an advantage of decreasing the coupling of applications in a distributed environment and removing the need for many static dependencies. In this paper, we design and implement the secure event service for providing secure ubiquitous computing environment. The Secure Event Service implemented enables users to perform content-based event retrieval, and supports only eligible event comsumer and event producer can publish and receive events through the secure event service. SPKI/SDSI certificate is used for supporting authentication and authorization in the secure event service. In order to provide a content-based event retrieval, an asynchronous communication between event producers and consumers, and a disconnectedness support for mobile devices, we modify and expand the JavaSpace package.
참고문헌 (22)
- Manuel Román, "Gaia:A Middleware Infrastructure to Enable Active Spaces", In IEEE Pervasive Computing, pp.74~83 (2002)
- A. Rakotonirainy, "Middleware for Reactive Components: An Integrated Use of Context, Roles, and Event Based Coordination", Lecture Notes In Computer Science, 통권 : 2218, pp.77~98
- Bhaskar Borthakur, "Event Service User Manuel", white paper (2001)
- Bhaskar Borthakur, "The Event Service", white paper (2001)
- Object-Orientated Concepts Inc, "ORBacus for C++ and Java", Object-Orientated Concepts Inc, ~ (1998)
- Object Management Group, "The Common Object Request Broker : Architecture and Specification, 2nd Ed", ~ (1995)
- Roy Campbell, "Towards Security and Privacy for Pervasive Computing", LECTURE NOTES IN COMPUTER SCIENCE, 통권 : 2609 (2003)
- Shiva Chetan, "Towards Fault Tolerant Pervasive Computing", In IEEE Technology and Society., 24(1), pp.38~44 (2005)
- David F. Ferraiolo, "Proposed Nist Standard for Role-Based Access Contro", ACM Transactions on Information and System Security, 4(3), pp.224~274 (2001)
- Ravi S. Sandhu, "Access Control: Principle and Practice,", IEEE communications Magazine, pp.40~49 (1994)
- Sun Microsystems, "Jini(TM) Architecture Specification" (2000), Sun Microsystems
- W.Keith Edwards, "Core Jini" (2000), Pearson Education
- Philip Bishop, "JavaSpaces IN PRACTICE" (2003), Addison-Wesley
- Sun Microsystems, "Jini(TM) Technology Core Platform Specifications" (2005), Sun Microsystems
- 이영록, "RBAC 및 비밀통신 기능을 갖는 SPKI", SDSI HTTP 보안서버, 2003, ~
- Carl M. Ellison, "SPKI Certificate Theory", RFC, 통권 : 2693 (1999)
- Carl M. Ellison, "PKI Examples", Internet-Draft (1998)
- Dwaine Clarke, "Certificate Chain Discovery in SPKI", SDSI, 2000, pp.9, ~
- Norman, D, "The invisible computer: why good products can fail, the personal computer is so complex, and information appliances are the solution" (1998), MIT Press
- 최성재, "모바일 애드혹 네트워크의 안전하고 효과적인 최적의 인증경로 탐색 기법", 정보과학회논문지 : 정보통신, 32(3), pp.310~317 (2005), 한국정보과학회
- K.Sanzgiri, "Authenticated routing for ad hoc networks", IEEE Journal on Selected Areas in Communications, (2005)
- G. Navarro, "Access control with safe role assignment for mobile agents", AGENTS: International Conference on Autonomous Agents (2005)