The Design And Implementation Of Secure Ons Information Service

With the development of Internet of Things, the supply chain information identification and tracking system, which is based on the EPCglobal system, has been widely used. The ONS information service is an important part of the EPCglobal system, and its implementation is the foundation of the EPCglobal system to process information.sharing. In addition, when the EPCglobal system is processing the information sharing function, potential safety hazard is increasing. Furthermore, the ONS information service, as the fundamental service, is vital to the security of the whole EPCglobal system. Therefore, the study of its security can never be neglected.In this paper, the author first reviewed the ONS solutions at home and abroad, then the author combined those solutions with the EPCglobal system requirements. Following the GS1standards for ONS, in the end, the ONS service system with three layer architecture was designed. For this architecture, the ONS service system was built with the bind software based on DNS. Specifically speaking, it mainly include the ONS encoding conversion module and the ONS records parsing module. Besides, the NS delegation was used to realize the division of three-tier architecture, and the DNAME delegation was applied to build the interconnection of mid-tier server. Then the author also analyzed the security of the ONS, which is included in the ONS information service, and the EPCIS service respectively. It was found that there are some security problems in the ONS information service. In order to improve the whole security of the ONS information service, the author suggested that the traditional DNSSEC technology can be joined in it. Likely, the X.509two-way authentication mechanism can also be joined in the EPCIS service to accomplish the EPCIS access control between the client and the server as well as the data encryption. As a result, the security of EPC information is ensured.Finally, the author made the function, performance testing and security verification for the ONS information service. Through test, the author found that, on the one hand, the ONS service designed can process the normal function. On the other hand, it has improved the efficiency of the query service together with the stability of the entire service. What is more, it can reduce the risks of single root ONS server. Then, through the security verification, which is mainly concerned with the EPCIS service with X.509authentication mechanism, it turned out that it implemented the two-way authentication of EPCIS client and server, and so was the data encryption transmission. Accordingly, the security of the ONS information service was improved.