一种基于TPM匿名证书的信任协商方案

为促进分布式网络环境中跨安全域的信息共享与协作，需要一种合理有效的信任协商敏感信息保护机制．可信计算组织(Trusted Computing Group，TCG)专注于从计算平台体系结构上增强其安全性．基于可信计算的匿名证书机制提出一种新的信任协商方案：匿名证书信任协商ACTN(anonymous credentials based trusted negotiation)，良好地解决了跨安全域的敏感信息保护的问题，可以有效地防止重放攻击、窜改攻击和替换攻击．使用一个硬件模块TPM进行隐私信息保护，并通过TPM模块提供可靠的匿名证书和平台认证．定义了ACTN的模型以及模型中的匿名证书，详细说明了匿名证书的基本参数以及匿名证书的创建方法，讨论了策略的安全性、委托机制以及证书链的发现机制，同时设计了 协商节点的框架以及协商过程．通过实验并与TrustBuilder和COTN协商系统进行比较，表明系统具有良好的稳定性和可用性．最后指出相关的一些未来研究方向．

工程地质三维建模与可视化技术应用开发

Synthetic Geology Information System (SGIS) is an important constituent part of the theory of Engineering Geomechanics Mate-Synthetic (EGMS), and is the information system more suited for the collection, storage, management, analysis and processing to the information coming from engineering geology,' geological engineering and geotechnical engineering. Its contents involve various works and methods of the investigation, design, and construction in different stages of the geological engineering. Engineering geological and three-dimensional modeling and visualization is the fundamental part of the SGIS, and is a theory, method and technique by which, adopting the computer graphics and image processing techniques, the data derived from engineering geological survey and the calculated results obtained from the geomechanical numerical simulation and analysis are converted to the graphics and images displayed on the computer screen and can be processed interactively. In this paper, the significance and realizing approaches of the three-dimensional modeling and visualization for the complex geological mass in the engineering geology are discussed and the methods of taking advantage of the interpolation and fitting for the scattered and field-surveyed data to simulate the geological layers, such as the topography and earth surface, the groundwater table and the stratum boundary, are researched into. At the mean time, in mind the characteristics of the structure of the basic data for three-dimensional modeling, its visual management can be resolved into the engineering surveyed database management module, plot parameter management module and data output module and the requirement for basic data management can be fulfilled. In the paper, the establishment and development of the three-dimensional geological information system are probed tentatively, and an instance of three-dimensional visual Engineering Distribution Information System (EDIS), theConstruction Management Information System for an airport, in which the functions, such as the real-time browse among the three-dimensional virtual-reality landscapes of the airport construction from start to finish, the information query to the airport facility and the building in the housing district and the recording and playback of the animation sets for the browse and the takeoff and landing of the planes, is developed by applying the component-mode three-dimensional virtual-reality geological information system (GIS) software development kits (SDK), so the three-dimensional visual management platform is provided for the airport construction. Moreover, in the gaper, integrated with the three-dimensional topography visualization and its application in the Sichuan-Tibet Highways, the method of the digital elevation model (DEM) data collection from the topographic maps is described, and the three-dimensional visualization and the roaming about the terrain along the highway are achieved through computer language programming. Understanding to the important role played by the varied and unique topographical condition in the gestation and germination of the highly-dense, frequently-arising and severely-endangered geological hazards can be deepened.