CAJ | 학술논문

信息化时代的到来，信息安全问题充斥着整个互联网领域。伴随着黑客技术的成熟，入侵个人计算机也已是一件易事，因而对个人计算机隐私和使用权限的管理显得尤为重要。然而常用的开机密码保护在朋友或同事要使用您计算机时会受到种种安全性考验。文章主要针对计算机使用权限的管理问题，基于 RSA 加密算法，提出了一种基于手机动态密码的计算机使用权限管理机制。首先，利用手机端与 PC 端共同作用提供动态密码，动态密码加密的设计在 RSA 加密模式基础上进行了一些优化与改进，利用明文编码和 RSA 加密算法生成动态密码，避免了时间种子生成动态密码的一些弊端，增加了密码破解的难度，也更加提高了加密的安全性。其次，提供了文件保护机制，给使用者设置不同的文件访问权限，并将这些信息融入到动态密码当中，计算机解锁后通过在内核中加载文件过滤驱动来保护用户私有目录的安全，提高了对系统敏感文件的防护等级。该机制立足于解决生活中计算机使用权限的难题，实现了用于计算机权限管理的手机动态密码系统。实验结果表明该机制有效解决了个人隐私和权限管理问题，具有较好的应用前景。
신식화시대적도래，신식안전문제충척착정개호련망영역。반수착흑객기술적성숙，입침개인계산궤야이시일건역사，인이대개인계산궤은사화사용권한적관리현득우위중요。연이상용적개궤밀마보호재붕우혹동사요사용니계산궤시회수도충충안전성고험。문장주요침대계산궤사용권한적관리문제，기우 RSA 가밀산법，제출료일충기우수궤동태밀마적계산궤사용권한관리궤제。수선，이용수궤단여 PC 단공동작용제공동태밀마，동태밀마가밀적설계재 RSA 가밀모식기출상진행료일사우화여개진，이용명문편마화 RSA 가밀산법생성동태밀마，피면료시간충자생성동태밀마적일사폐단，증가료밀마파해적난도，야경가제고료가밀적안전성。기차，제공료문건보호궤제，급사용자설치불동적문건방문권한，병장저사신식융입도동태밀마당중，계산궤해쇄후통과재내핵중가재문건과려구동래보호용호사유목록적안전，제고료대계통민감문건적방호등급。해궤제립족우해결생활중계산궤사용권한적난제，실현료용우계산궤권한관리적수궤동태밀마계통。실험결과표명해궤제유효해결료개인은사화권한관리문제，구유교호적응용전경。
With the rapid development of information technology, the Internet area has inundated with information security problems. With the maturity of hacker technology, the invasion of a personal computer has become an easy task, so personal computer privacy and permission management have become more seriously in our daily life. Traditional methods that only use login password would threat to computer security and privacy when owner’s friends or colleagues use his computer. Based on the RSA encryption mode, we design a dynamic password encryption algorithm and propose a mechanism on computer access permission management mechanism. Firstly, the mechanism could increase the difficulty of password cracking and improve the security of encryption with the use of dynamic password created by both PC and mobile terminal. We combine plaintext coding with RSA encryption algorithm for dynamic password in order to avoid some problems of dynamic password generated by time seed algorithm. In addition, we added control information into the dynamic password, and loaded the filter driver of file in the kernel after the screen was successfully unlocked, therefore, owner’s private directory would be safer and the system protection grade of sensitive documents would be higher. The mechanism we implemented is aimed to solve as mall and awkward problem in our daily life. Experimental results show that mechanism on computer access permission management based on the dynamic password can solve the problem of personal privacy and access permission management effectively, thus it has a good prospect of application.