Study on Digital Evidence Protection and Agent-Oriented Access Control Mechanisms Based on Cloud Identity Authentication

瀏覽統計 Email 通知 RSS Feed

簡歷

基本資料

Project title

Code/計畫編號

NSC102-2221-E019-041

Translated Name/計畫中文名

基於雲端身份驗證的數位證據保全與代理人存取控管機制之研究

Project Coordinator/計畫主持人

Han-Yu Lin

Funding Organization/主管機關

National Science and Technology Council

Department/Unit

Department of Computer Science and Engineering

Website

https://www.grb.gov.tw/search/planDetail?id=3098383

Year

2013

Start date/計畫起

01-08-2013

Expected Completion/計畫迄

31-07-2014

Bugetid/研究經費

472千元

ResearchField/研究領域

資訊科學--軟體

數位證據是一種數位化及易揮發的電子證據，其乃是透過科技的手法來保存、識別、抽取、記載與解讀之數位資料。為滿足其法律上的效力，我們必須確保上述鑑識程序中關鍵數位證物的完整性、機密性、以及鑑別性。在實務的管理中，不同階段的鑑識工作多交由不同的鑑識人員或小組分層負責。不安全的數位證據轉移方式與不當授權的存取模式，常造成數位鑑識系統的安全性遭受嚴重的質疑。如何強化現行的數位鑑識系統安全乃是不容小覷的重要課題。我們擬結合基於雲端身份驗證的技術來提供安全的數位證據保全與代理人存取控管機制，協助不同階段的鑑識人員進行數位證據的封裝與線上分析處理，並提供線上代理人設定模組與金鑰更新模組的能力，可以輕易地控管鑑識人員的存取權限，與支援具時限之文件機密性保護，進而創造出更多的實務效益。具體而言，本計劃即致力於分析、建置、整合「基於雲端身份驗證的數位證據保全與代理人存取控管機制」。三個主要的計畫目的分別為(1).設計基於雲端身份驗證的數位證據保全機制；(2).設計基於雲端身份驗證的代理人存取控管機制；(3).整合基於雲端身份驗證的數位證據保全與代理人存取控管機制，期望能健全目前的數位證據保全程序並提供實務上更大的效益。 Digital evidence is a kind of digitalized and easily volatilized electronic evidence which is preserved, identified, extracted and analyzed by technological methods. To satisfy its legal effectiveness, we must ensure the integrity, confidentiality and authenticity of critical evidence during previous forensics processes. In practical management, forensics processes of all stages are usually handled by different forensics personnel or teams. It often causes serious concerns about the security of digital forensics systems due to insecure transfer of digital evidence and improper delegation of authorization. Consequently, how to strengthen the security of current digital forensics systems is an important issue. We plan to integrate cloud identity authentication techniques with digital evidence protection systems and agent-oriented access control mechanisms. The proposed system can not only assist forensics personnel of different stages with digital evidence encapsulation and online data analyses, but also provides them with the capabilities of online agent-setup and key-update. It can easily manage the access rights of forensics personnel and support time-bounded protection of data confidentiality, so as to crease more practical advantages. Concretely speaking, this project is devoted to the analysis, design and integration of digital evidence protection systems and agent-oriented access control mechanisms based on cloud identity authentication. Three project purposes are to (1). Design digital evidence protection systems based on cloud identity authentication; (2). Design agent-oriented access control mechanisms based on cloud identity authentication; (3). Integration of digital evidence protection system and agent-oriented access control mechanisms based on cloud identity authentication. We hope to strengthen the current processes of digital evidence protection and bring more realistic benefits.

Keyword(s)

雲端身份驗證
數位證據
代理授權
存取控制
資料加密
cloud identity authentication
digital evidence
agent-based delegation
access control
data encryption

DSpace CRIS

Study on Digital Evidence Protection and Agent-Oriented Access Control Mechanisms Based on Cloud Identity Authentication

基本資料

Description