公开(公告)号：EP2890084B1

公开(公告)日：2018-04-18

申请号：EP13199901.3

申请日：2013-12-31

申请人： THALES NEDERLAND B.V.

发明人： Iacob, Sorin M. ,  Quillinan, Thomas ,  Van Veelen, Bernard

IPC分类号： H04L29/08 ,  H04L9/08 ,  H04L9/14 ,  H04L9/32 ,  H04L29/06

CPC分类号： H04L63/104 ,  H04L9/0825 ,  H04L9/0833 ,  H04L9/088 ,  H04L9/0891 ,  H04L63/0428 ,  H04L63/065 ,  H04L63/0823 ,  H04L63/105 ,  H04L2209/60

摘要： The invention provides a method and system for controlling data distribution in a system (100) comprising a set of nodes (10) interconnected through a communication system and a shared data storage space (12), each node owning a part of the data maintained in the shared data storage space. Each node comprises a node manager (110) for controlling access by producer and consumer nodes to the data owned by the node. A first group of nodes are associated with a first trusting level and a second group with a second trusting level. A common shared key is generated for all members of the first group, and a unique key derived from the shared key for each member of the second group. Access to the node data part is controlled based on the shared key for the first group and based on the unique derived key for the second group.

公开(公告)号：EP2890084A1

公开(公告)日：2015-07-01

申请号：EP13199901.3

申请日：2013-12-31

申请人： THALES NEDERLAND B.V.

发明人： Iacob, Sorin M. ,  Quillinan, Thomas ,  Van Veelen, Bernard

IPC分类号： H04L29/08 ,  H04L9/08 ,  H04L9/14 ,  H04L9/32 ,  H04L29/06

CPC分类号： H04L63/104 ,  H04L9/0825 ,  H04L9/0833 ,  H04L9/088 ,  H04L9/0891 ,  H04L63/0428 ,  H04L63/065 ,  H04L63/0823 ,  H04L63/105 ,  H04L2209/60

摘要： The invention provides a method and system for controlling data distribution in a system (100) comprising a set of nodes (10) interconnected through a communication system and a shared data storage space (12), each node owning a part of the data maintained in the shared data storage space. Each node comprises a node manager (110) for controlling access by producer and consumer nodes to the data owned by the node. A first group of nodes are associated with a first trusting level and a second group with a second trusting level. A common shared key is generated for all members of the first group, and a unique key derived from the shared key for each member of the second group. Access to the node data part is controlled based on the shared key for the first group and based on the unique derived key for the second group.

摘要翻译： 本发明提供了一种用于控制系统（100）中的数据分发的方法和系统，该系统包括通过通信系统互连的一组节点（10）和共享数据存储空间（12），每个节点拥有维持在 共享数据存储空间。 每个节点包括节点管理器（110），用于控制生产者和消费者节点对节点拥有的数据的访问。 第一组节点与第一信任级别相关联，第二组与第二信任级别相关联。 为第一组的所有成员生成通用共享密钥，并为第二组的每个成员从共享密钥导出唯一密钥。 基于第一组的共享密钥并基于第二组的唯一导出密钥来控制对节点数据部分的访问。