文章詳目資料

國防管理學報

  • 加入收藏
  • 下載文章
篇名 強化國軍雲端服務存取權限機制之設計
卷期 43:2
並列篇名 The Enhancement of Information Security for the Access Authority of Military Cloud System
作者 蘇品長黃琮仁蘇泰昌
頁次 026-047
關鍵字 雲端架構身分認證混合式金鑰系統Cloud ArchitectureIdentity AuthenticationHybrid Cryptosystem System
出刊日期 202211

中文摘要

隨著科技日新月異,雲端空間之使用已進入普及的時代,綜觀民間企業及政府機關均有使用雲端空間功能提供客戶服務或是提供內部員工快速取得所需資料。國軍為達資訊快速傳遞及系統統一管理,故亦須使用雲端空間,惟現行國軍在使用者管理上,僅使用AD帳號及密碼的認證方式來登入各項系統,若其帳密遭竊將有機敏洩漏疑慮。本研究將基於橢圓曲線密碼系統、隨機背包密碼系統及結合智慧卡,利用相比RSA加密演算法擁有較小的密鑰長度且可達相同安全性的橢圓曲線密鑰與隨機背包密碼系統運算效能快,來強化國軍雲端服務系統的資訊安全及處理速度。

英文摘要

With the rapid development of technology, the application of cloud space had already entered the general era. More and more private enterprises and government agencies had utilized the cloud space to provide services for their customers or rapidly information acquisition for their employees. To achieve rapid information transmission and system unified management, it is necessary for the National Army to implement cloud space systems. However, only the Active Directory (AD) account and password were used in current National Army user management for the authentication to enter various systems. Therefore, there will be a risk of sensitive leakage if the accounts were been stolen. In this study, the information security and process speed of the cloud space service system of the Nation Army will be enhanced based on the Elliptic Curve Cryptography (ECC), random backpack cryptography system and combined with smart cards, taking the advantages of an elliptical curve key with a smaller key length compared to the RSA encryption algorithm and achieving the same security and random backpack cryptography system operation.

相關文獻