摘要
为了加强网络访问安全、减少恶意攻击发生几率,提出了一种基于双重触发的嵌入式内核安全访问控制方法,首先修改嵌入式内核,使其完全符合OSEK-time的标准双重触发调度模块,之后利用静态周期性抢占式调度策略,检测是否存在新的双重触发任务需要激活,再以双重触发的嵌入式内核为载体,构建一种CloudMLS方案模型,得到数据所有者和权威中心系统的公开参数,最后数据所有者通过上述获得的信息构建安全访问控制机制,并添加新安全级与安全访问结构关联,进而完成安全访问控制。仿真结果证明,信息熵接近于理想值8,密钥敏感性较强,加密后密文图像的灰度值分布均匀,能够有效完成明文加密、密文解密、角色分配、用户安全访问控制,拥有很高的实用性。
In order to enhance the security of network access and reduce the probability of malicious attacks, a method of security access control for embedded kernel based on the double trigger was proposed. Firstly, we modified the embedded kernel and made it fully conform to the standard double trigger scheduling module of OSEK-time. Then, we used the static periodic preemptive scheduling strategy to judge whether there were new double trigger tasks to be activated. Taking the embedded kernel based on the double trigger as the carrier, we constructed a CloudMLS scheme model to obtain the open parameters of the data owner and authority center(CA). Finally, the data owner constructed the security access control mechanism through the above information, and added a new security level associated with the security access structure and thus to complete the security access control. Following conclusions can be drawn from simulation results. The entropy of information is close to the ideal value(8). The key sensitivity is strong. The gray values of encrypted ciphertext images are evenly distributed. The proposed method can effectively complete the plaintext encryption, ciphertext decryption, role distribution, user security access control, so it has high practicability.
作者
米红波
MI Hong-bo(University of Science and Technology-Baotou Teachers'College,Baotou Inner Mongolia 014030,China)
出处
《计算机仿真》
北大核心
2021年第11期445-449,共5页
Computer Simulation
关键词
双重触发
嵌入式内核
安全访问控制
安全级
Double trigger
Embedded kernel
Security access control
Security level
