Research On Access Control Mechanism For Digital Products Trading

With the rapid development of mobile Internet and the diversification of thehandheld terminals such as iPhone, iPad and so on, and exchanging digital works onvarieties of mobile terminals by the new multimode application means like touchingthe screen, mobile reading mode of digital works has gained widespread use. On thisbasis, people are expecting to read digital works whenever and wherever possible.Accordingly, it is the urgent need to research on access control mechanism for digitalproducts trading to ensure that digital products are used legally in the whole life cycle.According to the trusted digital products trading application mode, the accesscontrol requirement of the digital products trading was analyzed, the managementmodel and data process of the trusted trading data was proposed, as well as the trustedtrading data uploading protocol was designed. Then, the structures of the critical dataare introduced, and safety designs of the protocol were described in the aspects ofnonrepudiation, message integrity, resistance to replay attack and trading dataconsistency.Aiming at the security requirements of multi-party computation, the accesscontrol mechanism orienting the Trading Data Management Platform was presented byusing action based access control model. According to the importance of the role,environmental states and the temporal states in Action-based Access Control model,the ways to get the network logical location based DHCP and to get the networkphysical location based SNMP was proposed, and the network location detector wasdesigned and implemented. The trusted software monitoring mechanism was presented,the produce of the security association request, the ways to get the softwareinformation, as well as the implementation of the mechanism were given. Finally, themethod to get the temporal states based on time stamp authority was designed andimplemented.The access control mechanism put forward can be widely used in the fields of thedigital publishing, electronic medical as well as electronic government affairs, andsupports the mobile remote access, cross-realm collaborative access, and multilevelsecurity access control in the ubiquitous network.