Universal Physical Access Control System (UPACS).

摘要

This research addresses the need for increased interoperability between the varied access control systems in use today, and for a secure means of providing access to remote physical devices over untrusted networks. The Universal Physical Access Control System (UPACS) is an encryption-enabled security protocol that provides a standard customizable device control mechanism that can be used to control the behavior of a wide variety of physical devices, and provide users the ability to securely access those physical devices over untrusted networks.;The protocol specifies the role of a parent network node which is a server responsible for managing access to one or more child nodes, each of which is used to actuate a single physical device. A trusted key server is required to facilitate mutual authentication between users and resource parents prior to their engagement with each other in fulfilling users' requests for management of their remote physical devices. The protocol encompasses six phases of operation, each of which may be executed independently. In the Resource Registration phase, users establish ownership of a resource parent and reserve it for future use. In the Child Node Addition phase, resource parent owners may add a new child node to their portfolio. In the Child Node Deletion phase, resource parent owners may delete a child node from their portfolio. In the Access Rights Modification phase, users with access rights to a child node may transfer all or a subset of those rights to another user. In the User Deletion phase, resource parent owners may revoke the access rights of another user to one of their child nodes. And finally, in the Child Node Actuation phase, users issue commands to a resource parent in order to control the behavior of the physical device connected to one of its child nodes.;Formal verification of the UPACS protocol proves that it satisfies several important security properties, including reachability and observational equivalence of terms exchanged between protocol participants, and correspondence properties of events occurring during execution of the protocol.