【電信學】【2015.06】物聯網中的身份管理方法

本文為丹麥奧爾堡大學（作者：VanyaZdravkova）的碩士論文，共92頁。

如今，無論何時何地何事，人們都需要連線到網際網路。由於資訊通訊技術（ICT）的發展，越來越多的專用服務（智慧住宅、遠端醫療、電子健康應用等）通過由機器到機器（M2M）通訊驅動的異構物聯網（IoT）網路提供給使用者。儘管通訊主要是通過使用裝置建立的，但是人類使用者是輸入和輸出資訊的真正的“發起者”和“消費者”。因此，必須將人類使用者視為“智慧”IoT物件，他/她應該被識別、認證和授權。

由於擔心人們共享私人資訊和資料的意願，使用者識別的過程被認為是非常微妙的。同時，在使用某一使用者裝置時，應予以考慮。在這種場景下，需要具有吸引力的使用者標識和身份管理（IdM）機制，並涵蓋IoT中的所有物件。此外，使用者在建立標識規則方面的積極作用，並始終擁有響應服務，是極其重要的。我們還會將討論的焦點轉移到“全民網際網路”的概念上。

本碩士論文針對使用者識別問題，提出一種創新的單物登入（STSO）IdM系統設計，其中終端使用者處於以使用者為中心的服務生態系統中。所提出的方案僅通過識別與使用者(個人計算裝置、感測器等)相關的“事物”之一來允許使用者識別、分配的服務訪問。此外，提出了一種新的基於計算裝置識別演算法（CDR演算法）的使用者識別方法。通過一套技術和業務分析方法，對本文所提出的CDR演算法和IdM系統進行了評估，以證明這一概念的有效性。通過討論證實了研究的重要性，並進一步闡明瞭未來研究的方向和目標。

Nowadays, 'people are united in their need to be connected to theInternet anywhere, anyhow, anytime. Thanks to the evolution of Informationcommunication technologies (ICT) more and more exclusive services (smart homes,telemedicine, e-Health applications etc.) are available for the users throughheterogeneous Internet of Things (IoT) networks, driven by machine to machine(M2M) communication. Although,the communication is established primarily by using devices, the human usersare real “generators” and “consumers” of the input and output information.Thus, the human user has to be considered as a “smart” IoT object, thus he/sheshould be identified, authenticated, authorized. The process of useridentification is considered to be very delicate due to the concerns for the people’s willingness ofsharing private information and data. At the same time, the utilized by a certainuser devices, should be taken into consideration. Within this context there isa need of attractive user identification and Identity Management (IdM)mechanisms, involving all of the objects in IoT. Furthermore, the active roleof the user in the creation of the rules of identification, and having alwaysresponsive services, are extremely important and slightly moving the focus tothe concept of ‘Internet of People’. The presentmaster thesis addresses the problems of user identification and proposes the designof a novel Single Thing Sign On (STSO) IdM system where the end-user is in themiddle of a user-centered services ecosystem. The proposed scheme enables userrecognition and assigned services access only by identification of one of the“things” related to the user (personal computing devices, sensors etc).Besides, the author proposes a novel user identification method driven bycomputing device recognition algorithm (CDR algorithm). The proposed CDRalgorithm and IdM system were evaluated through a set of technical and businessanalytical methodologies in order to proof the concept. The discussion confirmsthe importance of the researched matter and further clarifies the objectives.

1 引言

2 使用者識別

3 異構物聯網路中的識別方案

4 識別管理系統

5 結論與未來工作

下載英文原文地址：

http://page2.dfpan.com/fs/0lcj52210291560a592/

更多精彩文章請關注微訊號：