透過您的圖書館登入
IP:3.129.70.157
  • 期刊
  • OpenAccess

動態存取控制之雲端服務設計-以空軍航管模擬訓練系統為例

Design Dynamic Data Access Control Schemes for Cloud Service-A Case on Air Traffic Control Training System

摘要


國防部規劃在人力裁減狀況下,能藉由建置雲端環境有效率的執行任務,以改善資源佈署、資安防護等問題,以利任務順遂。然而,雲端運算仍存在著一些安全上的疑慮,以現今觀點來看,空軍刻正建置飛航管制模擬訓練系統,其中航管人員依屬性不同,區分了不同的席位,區分不同等級,也賦予不同的任務,每個人需要的控制權限也不相同。因此,存取權限的管理及異動需要仰賴後端龐大的資料庫,易衍生出浪費記憶體空間及冗餘時間等問題。本研究提出建置一個過切的雲端環境應用於空軍飛航管制訓練系統,運用橢圓曲線加密及自我認證等機制,加上動態存取控制,增加航行管制人員訓練服務,在降低管理開銷,不浪費後端資料庫條件下,讓使用者在特定權限內安全的存取資料,且不需考量到資安問題,符合部隊建軍備戰需求。

並列摘要


The National Defense Department is planning to construct a "cloud environment" in order to execute missions efficiently; hence, fixing problems such as resources allocation and information security while minimizing human resources. However, cloud computing still consists some questions regarding on the safety issue. From the perspectivenowadays, the air force is currently constructing an air traffic control training simulator system, and each operator is assigned with different position, level, and mission due to various job attributes. Thus, an enormous data base is needed for the management of various access authorizations. Such action can cause waste in memory space and time easily. This research will provide an appropriate "cloud environment" that is suitable for air force's air traffic control training simulator system through elliptical curve cryptography and self-certified certificate along with remote access control. This research is suitable for increasing the amount of training for the air traffic controller and decreasing management cost without causing waste for the data base, and provides the users with the necessary information under particular authorization without worries for information security. Hence, the mechanism designed in this study meets the requirements of the troop's armed preparation.

延伸閱讀