EPC全球网络数据安全理论及关键技术研究

项目名称： EPC全球网络数据安全理论及关键技术研究

项目编号： No.61300227

项目类型： 青年科学基金项目

立项/批准年度： 2014

项目学科： 自动化技术、计算机技术

项目作者： 时杰

作者单位： 暨南大学

项目金额： 23万元

中文摘要： 作为典型的物联网应用系统，EPC全球网络为供应链参与者提供了一个信息获取、信息存储和信息共享的交互平台。EPC全球网络中共享的数据极其敏感，迫切需要有效的安全机制保护EPC全球网络的安全。以往的研究集中于EPC全球网络底层RFID通信协议安全研究，而忽视了EPC全球网络顶层数据安全研究。鉴此，本项目旨在构建安全高效的EPC全球网络数据共享平台，重点解决EPC全球网络数据真实性和数据访问安全性问题。本项目拟以EPC全球网络和基于RFID的供应链网络为基础，重点研究如下问题：1）如何设计有效的EPC全球网络数据信任度评估模型和评估机制以判定数据的真实性；2）如何设计适应EPC全球网络安全需求的新型访问控制模型、高效的策略分析方法和高效的访问控制实施机制。本项研究试图为EPC全球网络数据真实性评估和访问控制提供一种新的思路和方法，具有相当的理论意义和应用价值。

中文关键词： 物联网；EPC全球网络；RFID；数据共享；访问控制

英文摘要： As representative system in Internet of Things, EPCglobal Network provides a platform for supply-chain partners to collect, store and share information. Due to the extreme sensitivity of the information in EPCglobal Network, it is urgent to provide security mechanisms in EPCglobal Network. Howevever, in the previous work, only the security problems of RFID communication attract sufficient attentions, but the data security problem on EPCglobal Network is ignored. Thus, this project aims to construct a secure and efficient data sharing platform for EPCglobal Network, mainly focusing on the study of data reliability and data access security problems. Based on the EPCglobal Network and RFID-enabled supply-chain network, this project will study the following problems: 1) how to design an effective and efficient data trustworthiness evaluation model and method to evaluate data reliability in EPCglobal Network; 2）how to design a new access control mechanism satisfying the security requirements of EPCglobal Network, including designing an effective access control model, policy analysis technology and efficient access control enforcement. This project aims to introduce a new theory and method for EPCglobal network data trustworthiness evaluation and access control, which have considerable theoretical and appliation value

英文关键词： Internet of Things；EPC global Network；RFID；data sharing；access control