【作者】 李鹏飞；

【导师】 封化民；

【作者基本信息】 西安电子科技大学 ， 密码学， 2009， 硕士

【摘要】 随着多媒体技术的快速发展,在政治、军事和经济等各个领域中产生了大量的涉密多媒体数据,如何保证涉密多媒体数据的安全是当前信息安全领域的重要研究课题。本论文重点研究多媒体数据库应用安全问题,研究如何确保访问用户身份的可鉴别性、访问主体权限的可控性、传输通道的机密性、以及针对视频数据具有层次性的特点,实现对其分层次的访问控制的问题。数字视频作为一种多媒体信息,从内容角度来讲它具有很强的逻辑性,可以看做是由数个逻辑故事单元组成。单一的将视频文件作为一个对象整体来进行访问控制存在局限性,因为视频中某一逻辑故事单元对于访问主体来说可能是敏感的,禁止其访问,但其他逻辑故事单元是允许访问的。对这种视频的分层次访问控制是传统访问控制模型无法实现的。本文在研究了视频的层次特征后,提出了视频数据逻辑单元的描述方法,扩展了访问控制模型,利用对象关系数据库,实现了视频的分层次访问控制,并按照PKI规范设计CA、RA等,实现身份认证功能;按照PMI规范设计?AA、属性证书等,实现用户的权限认证;结合扩展的RBAC访问控制、SSL以及强审计等信息安全技术,实现了多媒体数据库应用安全平台。更多还原

【Abstract】 With the rapid development of multimedia technology, there are more and moreconfidential multimedia data in the political, military and economic fields. How toensure the security of confidential multimedia data is crucial in information security.This paper focuses on the security issues in multimedia database applications,how to ensure the user’s identity and authorization, ensure the confidentiality in thetransmission channels between the two sides, as well as the implementation oflevel-division access control based on the video hierarchy features. As a kind ofmultimedia information, the digital video has very strong logicality. Therefore, thedigital video can be considered as several logical story units. Access control on asingle digital video which was processed as a whole has limitations. For example, in aconfidential video, there is only one certain logical story unit is sensitive or forbid toaccess, and others have the access permission, but it is unable to implementlevel-division access control on the traditional access control model. Based on theresearch of video hierarchy features, this paper, firstly proposes a description methodof video data logical units, secondly expands the access control model by usingobject-relational database, and then implements the video access control in differentlevels? According to PKI criterion, CA and RA are designed that realizes identityauthentication; According to PMI criterion, AA and Attribute certificate are designedthat realizes authorization management? Finally, combining with expanded RBACaccess control, SSL and strong auditing information security technologies, the paperimplements the multimedia application secure platform.更多还原