Thursday May 29, 2008

Is there anybody who is familiar with PKI and the PKI implementation on mobile communication? I tried to build up a lightweight infrastructure to keep the security for mobile transaction. If you have any comments or information about mobile payment/transaction security or PKI, symmetric-key, public-key etc, or some implementation research based on JavaME/JavaEE, please feel free to leave them here. Also you can reach me via email: yunpu.zhu-AT-sun-DOT-com

 ------------------------------------------------------------------------Thanks

In cryptography, a public key infrastructure (PKI) is an arrangement that binds public keys with respective user identities by means of a certificate authority (CA). The user identity must be unique for each CA. The binding is established through the registration and issuance process, which, depending on the level of assurance the binding has, may be carried out by software at a CA, or under human supervision. The PKI role that assures this binding is called the Registration Authority (RA) . For each user, the user identity, the public key, their binding, validity conditions and other attributes are made unforgeable in public key certificates issued by the CA.

The term trusted third party (TTP) may also be used for certificate authority (CA). The term PKI is sometimes erroneously used to denote public key algorithms, which do not require the use of a CA.

 

PKI arrangements enable computer users without prior contact to be authenticated to each other, and to use the public key information in their public key certificates to encrypt messages to each other.[1] In general, a PKI consists of client software, server software, hardware (e.g., smart cards), legal contracts and assurances, and operational procedures. A signer's public key certificate may also be used by a third-party to verify the digital signature of a message, which was made using the signer's private key. In general, a PKI enables the parties in a dialogue to establish confidentiality, message integrity and user authentication without having to exchange any secret information in advance, or even any prior contact. The validity of a PKI between the communicating parties is, however, limited by practical problems such as uncertain certificate revocation, CA conditions for certificate issuance and reliance, variability of regulations and evidentiary laws by jurisdiction, and trust.[2] These problems, which are significant for the initial contact, tend to be less important as the communication progresses in time (including the use of other communication channels) and the parties have opportunities to develop trust on their identities and keys.[2]

Sunday Dec 02, 2007

LaTeX
LaTeX(LATEX,音译“拉泰赫”)是一种基于TeX的排版系统,由美国计算机学家Leslie Lamport在20世纪80年代初期开发,利用这种格式,即使使用者没有排版和程序设计的知识也可以充分发挥由TeX所提供的强大功能,能在几天,甚至 几小时内生成很多具有书籍质量的印刷品。对于生成复杂表格和数学公式,这一点表现得尤为突出。因此它非常适用于生成高印刷质量的科技和数学类文档。这个系 统同样适用于生成从简单的信件到完整书籍的所有其他种类的文档。

摘自中文维基百科-LaTeX条目。[Read More]

Tuesday Nov 27, 2007

Totally from my personal interests. It's a good guide to how to demo software. Joel sometimes provide us some hint. 

http://www.joelonsoftware.com/items/2007/11/16.html 

[Read More]

Thursday Nov 01, 2007

*'Project Indiana' OpenSolaris Preview Debuts*

IT Jungle, Timothy Morgan; November 1, 2007

http://www.itjungle.com/tug/tug110107-story03.html



Sun Microsystems is taking its first public steps toward the delivery of its binary distribution of the OpenSolaris open source Unix operating system that underpins its Solaris Unix distribution by putting out the OpenSolaris Developer Edition. The software is the first milestone toward the delivery of a full OpenSolaris binary distribution in early 2008.[Read More]

Tuesday Oct 23, 2007

First paper is finished. It's a long period for revising it, hundreds of times, from V1 to V1.0.0.0.0.9 :) Luckly, it is finished. Going through the first paper's producing, the point is not on what I am research, it is relevant with my writing skill in English. It should be better after more practice. 

 We explained SHA-1 as a cryptographic hash functions firstly, and then described the program scheme of SHA-1. In addition, the reconfigurable features of the proposed architecture is studied to implement other versions of SHA. The architecture's performance is evaluated on the platform of Xilinx FPGA.

 

Thursday Oct 18, 2007

关于文献格式:一个常见问题是JabRef通常默认的格式采用UTF编码,所以使用JabRef前要检查General下的encoding选项是ASCII。采用 ASCII编码环境下要使用中文的话还要保证使用的codepage是正确的,即cp936,这是由编辑环境决定的,通常windows下没有问题,用 SciTE打开这样的bib数据库文件可以看到头部有JabRef自动添加的说明“This file was created with JabRef 2.2.Encoding: ASCII”,“文件”->“编码”下识别为“Code  Page Property”。若识别为UTF-8,那还需要在代码中指定使用CJKutf8宏包。[Read More]
In these days I am tortured by Listing References in the end of my first paper. I am always wondering if there is a standard form in which we can filled the enough information. I used IEEEbib. bst, but how should I finish my *.bib file? The article below seems useful for aiding my entrance. It's a long way to go, just like my first Tech Demonstration ^-^

This article is from : http://cmtw.harvard.edu/Documentation/TeX/Bibtex/Example.html

[Read More]

Friday Oct 05, 2007

In Merriam-Webster's Collegiate Dictionary, the word "context" is defined as "the interrelated conditions in which something exists or occurs". Schilit divides "context" into three categories:


Computing context: such as network connectivity, communication costs, and communication bandwidth, and nearby resources in terms of printers, displays, and workstations.

User context: such as the user's profile, location, people nearby,even the current social situation.

Physical context: such as lighting, noise levels, traffic conditions, and temperature.

Based on Schilit's three categories, the study is engaged in Computing context-awareness. Mobile facilities(e.g. PDA, smart-phone) and traditional computer machines(e.g. PC) are defined as the nearby resources of Computing context in my study. The investigation how a system performing Computing Context-Awareness should include Mobile Information System, Mobile Data Management and Context-Awareness etc. For illustrating the investigation, a system will be developed. The Java-based platform placed here is to support the rapid and multi-channeled data management(data collection and data presentation etc.). The platform integrates Smart Client,Context-Awareness Engine, Data Application Server and Data Channel Server etc.



 


The system infrastructure will be written in JavaEE and JavaME, which has visible advantages in application of Context-Awareness. Java ME provides a robust, °exible environment for applications running on mobile and other embedded devicesmobile phones, personal digital assistants (PDAs), TV set-top boxes, and printers. Currently JavaME are portable across many devices.


Thursday Oct 04, 2007


Sun Microsystems will be hosting the third Startup Camp in New York on October 22nd and 23rd. Startup Camp is an unconference-style event that's dedicated to bringing together the various members of the startup community for a face-to-face collaborative meetup where the attendees define the program.  
The camp -- its free to attendees -- will be held at the New York City Seminar and Conference Center. To register, or for more information, go to http://www.startupcamp.org/ video highlights from the very first Startup Camp in San Francisco here:

See



This blog copyright 2009 by Yunpu Zhu