多域安全互操作环境下隐私保护研究

In multi-domain circumstance, secure interoperability is major approach for resource sharing and cooperation. It is significiant that research mechanism of privacy preserving in multi-domain circumstance. Fristly, we researched the charactistic of information privacy, proposed a graphical description method based on the virtual reconstruction of information privacy. Secondly, according to the privacy preserving security demand, we research the mothod of extracting and quantizing the security elements which related with the system safety acording, established a safety assessment model founded on cloud model.Thirdly, we constructed a content privacy protection mechanism with the use of the secure multi-party computation theory and encryption technology based on identity, constructed a possession privacy protection mechanism to defend against inference attacks by utilize the theory of semantic reasoning and probabilistic reasoning and the AHP analysis.Lastly, through analyzing the influence of each safety variables to the evaluation results and locating system safety deficiencies, we ultimately established a feedback mechanism-based dynamic Multi-domain secure interoperability model that was based on feedback mechanism to dynamically adjust the security policy and system configuration such as privacy protection mechanisms to achieve system security optimization.The research output will propose new method and thinking for privacy preserving in multi-domain secure interoperability.

在多域环境中，安全互操作是资源共享和协作的重要方式，研究多域环境下的隐私保护安全机制具有重要意义。本项目首先研究多域安全互操作环境下信息隐私性的特征，提出了一种基于虚拟重构的信息隐私性可图形化描述方法；依据隐私安全目标需求提取隐私安全元素，采用云模型理论对定性安全元素进行定量转化，并建立系统隐私安全性可信评估函数；采用安全多方计算理论的方法，结合基于标识的加密技术，构建内容隐私保护机制；基于语义推理和概率推理理论的方法，并结合AHP分析法，针对推理攻击实施协同防御，构建拥有隐私保护机制；最后，分析各安全变量对评估结果的影响，定位系统安全缺陷，基于反馈机制实现安全策略、隐私保护机制等系统配置的动态调整，提出一种动态多域安全互操作隐私保护模型，实现系统隐私安全性的优化。本课题的研究成果可为多域安全互操作安全目标在隐私保护方面的扩展研究提供了方法和思路。

首先，本项目从信息隐私性定义出发，建立了一套完备的信息隐私性网状图形化描述模型，信息隐私关联包括语义关联、概率关联等常见的各种因素；然后，在此模型基础上，对多域环境下隐私安全性评价和预测方法进行研究，建立了基于D-S理论的隐私安全评估模型；最后，研究了隐私保护机制，其中包括零知识泄露的内容隐私保护机制研究和语义型、概率型拥有隐私保护机制研究及系统隐私安全性动态优化框架研究三个方面，建立包括多云服务、隐私入侵检测、移动通信、位置隐私等复杂多种多域安全互操作应用场景下的隐私保护方案。