Title :
Risk analysis and secure protocol design for WWW-based remote control with operation-privilege management
Author :
Kato, Hiromitsu ; Furuya, Masatoshi ; Tamano-mori, Maki ; Kaneko, Shigenori ; Nakano, Toshihiko
Author_Institution :
Syst. Dev. Lab., Hitachi Ltd., Kawasaki, Japan
Abstract :
The paper discusses security issues related to the use of the Internet for remote control of decentralized systems. After conducting risk analysis based on the detection of potential threats, we designed a Secure Tele-operation Protocol (STP) specification for Internet-based control systems. STP is an XML-based protocol that manages operation privileges for each online operator. If STP is used with intelligent agents, remote manipulation can be protected from both illegal interference and malicious access. Moreover, among the authenticated operators, operation privileges are negotiable for transfer to other authorized remote operators
Keywords :
Internet; authorisation; hypermedia markup languages; information resources; message authentication; protocols; risk management; software agents; telecontrol; Internet-based control systems; STP specification; Secure Tele-operation Protocol; WWW-based remote control; XML-based protocol; authenticated operators; authorized remote operator; decentralized systems; illegal interference; intelligent agents; malicious access; online operator; operation privileges; operation-privilege management; remote control; remote manipulation; risk analysis; secure protocol design; security issues; Access protocols; Communication system control; Communication system security; Control systems; Cryptography; Information security; Internet; Public key; Risk analysis; Risk management;
Conference_Titel :
Systems, Man, and Cybernetics, 2001 IEEE International Conference on
Conference_Location :
Tucson, AZ
Print_ISBN :
0-7803-7087-2
DOI :
10.1109/ICSMC.2001.973068
