一个可用于铁路无线接入网的有效安全协议

文章分析了宽带无线接入网MAC(介质访问控制)层的安全协议,发现其中存在着安全隐患;以增加少量通信负荷与计算量为代价,提出一个新的安全有效方案,实现了用户和基站之间的双向认证,确保基站可抵抗重放攻击,并保证了业务数据的完整性和真实性。     

Location privacy preferences: A survey-based analysis of consumer awareness,trade-off and decision-making

With the advent and rapid dissemination of location-sensing information technology, the issue of location information privacy is receiving growing attention. Perhaps of greatest concern is ensuring that potential users of mobile Information and Communications Technologies (e.g., Location-Based Services and Intelligent Transportation Systems) are comfortable with the levels of privacy protection afforded them, as well as with the benefits they will receive in return for providing private location information. This paper explores the concepts of privacy risks, benefits, willingness to trade, and compensation in relationship to mobile and locational technologies using a stated preference survey to ascertain areas of interest in determining the trade-offs that consumers will be willing to make in return for mobility enhancements. Analysis of the survey leads to findings that while respondents believe that sharing data in the mobile environment may pose privacy risks, they do not generally take steps necessary to address these risks; that privacy preferences are impacted by a range of factors, including both personal and contextual considerations (such as factors arising from their specific situation at the time of information seeking); and that willingness to trade private location data is dependent upon a number of factors related to context, personal characteristics, expected benefits and degree of trust in the collecting organization.     

车载网络中基于群签名的可保护隐私的车辆认证

安全和隐私是配置车载网络时所需要的2个重要条件,具有保护隐私功能的认证是实现这2个条件的关键技术.不同于已有的认证方案,文中用群签名来实现车载网络中能保护隐私的车辆认证.为了满足认证的快速性要求,基于目前安全性最强、效率较高和签名较短的ZL 06局部验证者撤销短群签名方案,提出了2个具有隐私保护功能的车载网络中的车辆认证方案.群签名所具有的良好性质保证了所提出的认证方案具有实用性和隐私保护功能.     

个人信息权民事确权刍议

2009年《侵权责任法》第2条,明确列举了包括隐私权在内的各项民事权益。而随后的全国人大法工委、国务院法制办对《侵权责任法》中"隐私权"涵义的解读,引起了人们对隐私权背后的个人信息权益的关注。论文从隐私权解读的角度,比较分析确认了个人信息与隐私相互交融、彼此独立存在的民事法律关系,并从我国人格权法律发展的角度,详细论证了个人信息权民事确权的必要性与可能性,以其丰富完善人格权理论。     

智能网联汽车数据安全管理研究

智能网联汽车大数据已经成为推动自动驾驶技术迭代更新,促进产业生态创新发展的基础性战略资源,随之而来的用户隐私和数据安全问题受到了社会各界的广泛关注。分析了智能网联汽车数据区别于一般大数据的典型特征,针对不同类别的数据进行了权属问题研究,认为除基础属性信息外,其他数据都应在匿名处理后进行分析应用。研究提出了目前数据产业化应用的4种典型场景。在国内外关于汽车数据安全保护相关法律法规的框架下,从国家、行业、企业3个层面分析提出了规范数据采集处理、强化数据挖掘应用的策略建议。     

Recreational Use of Developed Norwegian Shorelines: How Ambiguous Regulations Influence User Experiences

In principle, public rights of access to “outfield” along the Norwegian shoreline are protected by law. A case study from the village of Saltnes indicates that it is difficult for people to stay or walk along a populated shoreline area without feeling that they are violating privacy norms. Such “mental” barriers and subjective perceptions are not formally addressed in Norwegian regulations concerning legal rights of public access, but appear to affect the extent of recreational use. Interviews with property owners and visitors in Saltnes indicated that two key elements help to improve the situation. First, physical markers demarcating public land (“outfield”) and private land (“infield”) such as vegetation, small fences, signs, boulder walls, paths, and so on seem to reduce discomfort both for visitors and residents. Second, property owners and visitors value polite behavior highly, and communication between different groups of interests seems to clarify the challenging public/private divide. A main impression was that people find present rules and regulations unclear and diffuse and difficult to practice. It is relevant to ask whether the public accessible parts of developed and populated coastal zones are identifiable through the infield–outfield divide; more specific and adapted regulation of public traffic is needed on private shoreline properties.     

高校精准资助育人体系构建中的难点探析

贫困生的隐私保护是高校精准资助育人体系中不容忽视的部分,也是高校资助工作的难点之一。在实践过程中,由于各种原因,高校资助工作中出现了贫困生隐私保护不到位的问题,学生的个人权益受到侵害。为更好地保护学生隐私,提升精准资助育人成效,提出以下建议:规范高效资助制度,优化工作细节;重视隐私保护,营造情境友好的校园氛围;加强扶志教育,提升高校贫困生的法律素养。     

Wep协议加密算法安全隐患分析

分析了目前WEP协议的主要加密算法中存在的几个主要问题：WEP加密机制、IV的重复使用、对ICV（integrity check value）的攻击、对RC4算法的攻击.对这些问题产生的原因进行了比较详细的说明.     

Google Earth对信息安全的威胁与对策

Google Earth自2005年诞生以来,将原本昂贵的遥感影像免费公诸于众,且分辨率不断提高,并提供了信息标注和网络共享功能,立刻引起全球网民应用Google Earth的热潮,其应用已从最初的图片浏览、旅游、导航服务,延伸到地理教学,甚至土地调查、辅助规划、辅助成图等专业技术领域。但Google Earth在给大众带来乐趣和方便的同时,也给信息安全带来了严重威胁。威胁的原因主要来自两个方面:高分辨率影像造成的信息泄露和信息标注共享功能造成的信息泄露,而威胁主要体现在国家安全、社会公共安全和个人隐私安全三个层面。因此,应从这三个层面加以分析应对:在国家层面应加强自身防范和国际合作,政府应加强监管和立法,并推进技术防范,而社会应做好信息安全的宣传教育,广大网民则应做好自律工作。只有各个层面共同努力,才能在享受Google Earth给我们带来的便利的同时,将其对信息安全的影响降到最低。     

隐私的边界及其内容探析

本文从"公生活"的角度出发,引进了公关系和绝对隐私等概念,研究了隐私权的保护客体(隐私)及其内容,较好地展示了隐私与公生活之间的边界,为进一步制定和实施相关的法律提供了重要的基础.