【作者】 刘泉；

【导师】 周祖德；

【作者基本信息】 武汉理工大学 ， 机械制造及其自动化， 2004， 博士

【摘要】 网络的发展尤其是互联网的发展，给制造业带来了一场深刻的革命，使网络制造获得了快速的发展。与此同时，也带来了难于克服的信息安全隐患。网络上的许多敏感信息和保密数据难免受到各种主动的或被动的人为的攻击，如信息泄露、信息窃取、数据篡改、数据增删及计算机病毒感染等。另外，Internet的发展和宽带业务的增长，使企业、政府以及制造行业利用Internet这个公用平台不受区域限制地建立自己的私有网络成为可能。然而这种廉价便捷的组网方案同时也带来了安全性的问题。近年来，国内外许多学者提出了一系列新的信息安全与知识产权保护的理论和思想。作者通过研究，开创性地应用于制造领域，很好地解决了制造信息的安全交换和传输以及产品产权保护等问题。本文的主要研究工作如下： 1．信息隐藏与数字水印技术是一种新的数字媒体产权保护措施。本文从网络制造产品产权保护的问题出发，主要对数字产品图防篡改、水印攻击和完整水印系统的设计等问题进行了深入的研究和探讨，解决了若干理论和实际问题。首次提出了一种基于奇异值分解和扩频技术的数字水印算法，并申请了国家发明专利。实验证明由此算法得到的含水印的图像在视觉上与原图无差异，且对一般图象处理(对抗噪声、均值滤波、剪切、旋转和JPEG压缩等)都具有良好的鲁棒性。 2．研究和分析了目前广泛使用的IPSec协议体系以及VPN的嵌入式硬、软件协同设计理论和实现技术。根据IPSec协议的自身特点，结合当前对网络处理业务支持的硬件特征，设计了一种基于MPC8250的嵌入式高速VPN网关硬件体系结构和软件系统。同时申报了“一种利用DSP处理IPSec安全协议中加／解密的系统”发明专利，为制造网络的资源共享和信息安全提供了一个具有广泛应用前景的软硬件解决方案。并对已经实现的原型系统做了系统测试和数据分析。 3．通过数字水印和VPN两项关键技术的研究以及相关理论的应用分析，本文首次提出了网络制造产品产权保护与制造信息安全的体系结构。该体系结构的研究，实现了对网络制造产品的版权保护和重要信息的隐藏，同时为网络制造联盟企业建立了安全通信隧道，保证了数据在开放网络环境中的安全传输。实验结果表明该系统具有良好的安全性和可靠性。 武汉理工大学博士学位论文二二二二二二二二二二二二二二二二 4.根据网络信息技术的最新进展和研究成果，在分析网格计算相关理论和技术的基础上，结合网络制造资源共享和信息安全的应用，首次提出了面向制造的开放式网格计算层次结构模型，并根据该模型构建了网络制造资源共享安全平台。 网络制造产品产权保护、制造资源共享和信息安全的研究，涉及制造和信息等多个领域，许多知识和技术都是若干学科的交叉，因此，其理论的深入研究和技术的开发应用尚有大量艰巨的工作。更多还原

【Abstract】 With the rapid development of the network, especially the Internet, the manufacture enterprise is undergoing a profound revolution and network manufacture getting the chance of fast progressing. However, the problem of information security has become the bottleneck. The main problem is that the important information and secret data on the Internet are hard to avoid undergoing various kinds of passive or active man-made attacking. For example, information leaking, information stealing, data seizing, and computer virus infecting and so on. Furthermore, the increase of wideband operation make it possible for enterprises, governments and manufacture industry to make use of Internet to create their own private network without area restriction. Obviously this kind of network construction scheme is cheap, convenient but the information security problem could not be avoided. In recent years, a set of new theories and concepts about information security and intellectual copyright protection have been proposed by scholars all over the world. In this thesis, the digital watermark theory and technology applied to the field of manufacture industry, and the secure exchange and transmission of manufacture information and the intellectual copyright protection of products are introduced. The main research work is as below:1. Information concealing and digital watermark technology is a new copyright protection measure of digital media. In order to solve the problem of the copyright protection of the network manufacture products, tamper protection of digital products, watermark attacks and the design of integrated watermark system are discussed emphatically, and a series of theories and practical problems are solved. In the thesis, a novel digital watermark algorithm based on SVD (singular value decomposition) is proposed, according to this research work one of national invention patent has been applied successfully. The experimental results showed that the watermarked images obtained by the algorithm has no difference comparing the original images vision, and the algorithm is perfect robust to image processing such as noise, mean value filter, crop, rotation and JPEG compress etc.2. The IPSec protocol system and the cooperative design theory and realization technology of the hardware and software of embedding system of VPN (virtual private network) are analyzed in this thesis. According to the properties of IPSec protocol and the hardware characters supporting network-processing service, embedding hardware architecture of the high-speed VPN gateway and software system based on MPC8250 isdesigned. An encryption/decryption system using DSP to process IPSec security protocol has been applied for one of national invention patent. It can provide a promising software and hardware solution for the resource sharing and information security of network manufacture. Moreover, the system test and data analyzing of the system implemented are presented in the thesis.3. Based on the research and the analysis of relative theories of the two keytechnology--digital watermark technology and VPN technology, in this thesis, thearchitecture of the copyright protection of network products and manufacture information security is put forward. The copyright protection of network products and important manufacture information concealing can be implemented by this architecture, and also it provided secure communication channels to the network manufacture alliance enterprises, so that the secure transmission of data under the open network environments will be assured. The experimental results proved that the system has great performance on security and reliability.4. According to the latest progress and research of network information technology, analyzing the theory and technology of grid computing, combing network manufacture resource sharing with information security application, for the first time, an architecture model of open grid computing orienting manufacture is proposed, and a secure platform of network man更多还原