A new design solution of data access layer for N-tier architecture is presented. It can solve the problems such as low efficiency of development and difficulties in transplantation, update and reuse. The solution util...A new design solution of data access layer for N-tier architecture is presented. It can solve the problems such as low efficiency of development and difficulties in transplantation, update and reuse. The solution utilizes the reflection technology of .NET and design pattern. A typical application of the solution demonstrates that the new solution of data access layer performs better than the current N-tier architecture. More importantly, the application suggests that the new solution of data access layer can be reused effectively.展开更多
Virtual machine (VM) data access control provides a cloud- computing platform with guaranteed safety. Given that the cloud platform envi- ronment is dynamically variable, static VM data access operational authorizat...Virtual machine (VM) data access control provides a cloud- computing platform with guaranteed safety. Given that the cloud platform envi- ronment is dynamically variable, static VM data access operational authorization is different from the dynamic cloud platform environment in state determination. This difference affects the safety and performance of VMs in the entire cloud platform. A constraint-based VM data access control model was proposed in this study to evaluate the influence of dynamic environmental change in a cloud plat- form on VM data access control operation. The state information of the dynamic cloud environment was considered a constraint evaluation function. The model realized organic integration of static Bell-LaPadula model safety level and dynamic cloud platform environmental information. A safety policy of VM data access control operation was established, and the capability of the constraint- based access control model to improve the safety of VMs was verified. A model implementation framework and the main functions in combination with the proposed model were realized. The effectiveness and performance of the constraint-based VM data access control model were also evaluated. Results showed that the performance loss was within 7% when the constrained VM data access control model was used for operations, such as VM management. The test of communication intensive workload of a VM indicated that the operating time of the model was increased by approximately 4%. The constraint-based VM data access control model in cloud platform could adapt to the complex dynamic cloud platform environment and improve the safety of VMs. This study provided tech- nical and theoretical bases for VM data access control in cloud platform.展开更多
Government access to platform-held data is increasingly implemented not through isolated requests but through durable interfaces:dashboards,periodic reporting pipelines and application programming interfaces.This shif...Government access to platform-held data is increasingly implemented not through isolated requests but through durable interfaces:dashboards,periodic reporting pipelines and application programming interfaces.This shift changes the object of legality.A single request can be assessed by asking whether a stated purpose justifies the particular disclosure.A standing interface,by contrast,creates an ongoing access capability whose intrusiveness accumulates through repetition,aggregation and time.This article develops a three-axis model for encoding the requirement of minimum necessity at the configuration layer of such interfaces.The model treats data fields,extraction frequency and temporal persistence as the minimal auditable surface of standing access,while requiring purpose,recipients,selectors and onward sharing to be recorded in the same authorisation schedule.Using Chinese administrative interface governance as a stress test,especially health-code pipelines and ride-hailing supervisory feeds,the article shows how lawful or plausible access channels can drift through field accretion,cadence escalation and retention extension.EU and US materials are used as design exemplars rather than as complete solutions,illustrating the importance of reasoned requests,strict-necessity limits,duration sensitivity and auditable safeguards.The article concludes by proposing a procedural toolkit:reasoned authorisations,versioned parameter sheets,access logs,renewal triggers,independent audit and remedies for drift.Where feasible,a policy-as-code counterpart can make authorised limits executable at the gateway.展开更多
As the risks associated with air turbulence are intensified by climate change and the growth of the aviation industry,it has become imperative to monitor and mitigate these threats to ensure civil aviation safety.The ...As the risks associated with air turbulence are intensified by climate change and the growth of the aviation industry,it has become imperative to monitor and mitigate these threats to ensure civil aviation safety.The eddy dissipation rate(EDR)has been established as the standard metric for quantifying turbulence in civil aviation.This study aims to explore a universally applicable symbolic classification approach based on genetic programming to detect turbulence anomalies using quick access recorder(QAR)data.The detection of atmospheric turbulence is approached as an anomaly detection problem.Comparative evaluations demonstrate that this approach performs on par with direct EDR calculation methods in identifying turbulence events.Moreover,comparisons with alternative machine learning techniques indicate that the proposed technique is the optimal methodology currently available.In summary,the use of symbolic classification via genetic programming enables accurate turbulence detection from QAR data,comparable to that with established EDR approaches and surpassing that achieved with machine learning algorithms.This finding highlights the potential of integrating symbolic classifiers into turbulence monitoring systems to enhance civil aviation safety amidst rising environmental and operational hazards.展开更多
Modern information systems require the orchestration of ontologies,conceptual data modeling techniques,and efficient data management so as to provide a means for better informed decision-making and to keep up with new...Modern information systems require the orchestration of ontologies,conceptual data modeling techniques,and efficient data management so as to provide a means for better informed decision-making and to keep up with new requirements in organizational needs.A major question in delivering such systems,is which components to design and put together to make up the required“knowledge to data”pipeline,as each component and process has trade-offs.In this paper,we introduce a new knowledge-to-data architecture,KnowID.It pulls together both recently proposed components and we add novel transformation rules between Enhanced Entity-Relationship(EER)and the Abstract Relational Model to complete the pipeline.KnowID’s main distinctive architectural features,compared to other ontology-based data access approaches,are that runtime use can avail of the closed world assumption commonly used in information systems and of full SQL augmented with path queries.展开更多
MORPAS is a special GIS (geographic information system) software system, based on the MAPGIS platform whose aim is to prospect and evaluate mineral resources quantificationally by synthesizing geological, geophysical,...MORPAS is a special GIS (geographic information system) software system, based on the MAPGIS platform whose aim is to prospect and evaluate mineral resources quantificationally by synthesizing geological, geophysical, geochemical and remote sensing data. It overlays geological database management, geological background and geological abnormality analysis, image processing of remote sensing and comprehensive abnormality analysis, etc.. It puts forward an integrative solution for the application of GIS in basic-level units and the construction of information engineering in the geological field. As the popularization of computer networks and the request of data sharing, it is necessary to extend its functions in data management so that all its data files can be accessed in the network server. This paper utilizes some MAPGIS functions for the second development and ADO (access data object) technique to access multi-source geological data in SQL Server databases. Then remote visiting and congruous management will be realized in the MORPAS system.展开更多
Researchers have devised a system to recover targeted files from 200 megabytes of data encoded in DNA.Random access is a key for a practical DNA-based memory,but until now,researchers have been able to achieve it with...Researchers have devised a system to recover targeted files from 200 megabytes of data encoded in DNA.Random access is a key for a practical DNA-based memory,but until now,researchers have been able to achieve it with only up to 0.15 megabytes of data.DNA data storage involves translating the binary 0s and 1s of digital data into sequences of the four bases A,C,G,and T that make up DNA.展开更多
Data organization requires high efficiency for large amount of data applied in the digital mine system. A new method of storing massive data of block model is proposed to meet the characteristics of the database, incl...Data organization requires high efficiency for large amount of data applied in the digital mine system. A new method of storing massive data of block model is proposed to meet the characteristics of the database, including ACID-compliant, concurrency support, data sharing, and efficient access. Each block model is organized by linear octree, stored in LMDB(lightning memory-mapped database). Geological attribute can be queried at any point of 3D space by comparison algorithm of location code and conversion algorithm from address code of geometry space to location code of storage. The performance and robustness of querying geological attribute at 3D spatial region are enhanced greatly by the transformation from 3D to 2D and the method of 2D grid scanning to screen the inner and outer points. Experimental results showed that this method can access the massive data of block model, meeting the database characteristics. The method with LMDB is at least 3 times faster than that with etree, especially when it is used to read. In addition, the larger the amount of data is processed, the more efficient the method would be.展开更多
To address the private data management problems and realize privacy-preserving data sharing,a blockchain-based transaction system named Ecare featuring information transparency,fairness and scalability is proposed.The...To address the private data management problems and realize privacy-preserving data sharing,a blockchain-based transaction system named Ecare featuring information transparency,fairness and scalability is proposed.The proposed system formulates multiple private data access control strategies,and realizes data trading and sharing through on-chain transactions,which makes transaction records transparent and immutable.In our system,the private data are encrypted,and the role-based account model ensures that access to the data requires owner’s authorization.Moreover,a new consensus protocol named Proof of Transactions(PoT)proposed by ourselves has been used to improve consensus efficiency.The value of Ecare is not only that it aggregates telemedicine,data transactions,and other features,but also that it translates these actions into transaction events stored in the blockchain,making them transparent and immutable to all participants.The proposed system can be extended to more general big data privacy protection and data transaction scenarios.展开更多
With the rapid advancement of cloud computing technology,reversible data hiding algorithms in encrypted images(RDH-EI)have developed into an important field of study concentrated on safeguarding privacy in distributed...With the rapid advancement of cloud computing technology,reversible data hiding algorithms in encrypted images(RDH-EI)have developed into an important field of study concentrated on safeguarding privacy in distributed cloud environments.However,existing algorithms often suffer from low embedding capacities and are inadequate for complex data access scenarios.To address these challenges,this paper proposes a novel reversible data hiding algorithm in encrypted images based on adaptive median edge detection(AMED)and ciphertext-policy attributebased encryption(CP-ABE).This proposed algorithm enhances the conventional median edge detection(MED)by incorporating dynamic variables to improve pixel prediction accuracy.The carrier image is subsequently reconstructed using the Huffman coding technique.Encrypted image generation is then achieved by encrypting the image based on system user attributes and data access rights,with the hierarchical embedding of the group’s secret data seamlessly integrated during the encryption process using the CP-ABE scheme.Ultimately,the encrypted image is transmitted to the data hider,enabling independent embedding of the secret data and resulting in the creation of the marked encrypted image.This approach allows only the receiver to extract the authorized group’s secret data,thereby enabling fine-grained,controlled access.Test results indicate that,in contrast to current algorithms,the method introduced here considerably improves the embedding rate while preserving lossless image recovery.Specifically,the average maximum embedding rates for the(3,4)-threshold and(6,6)-threshold schemes reach 5.7853 bits per pixel(bpp)and 7.7781 bpp,respectively,across the BOSSbase,BOW-2,and USD databases.Furthermore,the algorithm facilitates permission-granting and joint-decryption capabilities.Additionally,this paper conducts a comprehensive examination of the algorithm’s robustness using metrics such as image correlation,information entropy,and number of pixel change rate(NPCR),confirming its high level of security.Overall,the algorithm can be applied in a multi-user and multi-level cloud service environment to realize the secure storage of carrier images and secret data.展开更多
基金the Foundation for Key Teachers of Chongqing University (200209055).
摘要A new design solution of data access layer for N-tier architecture is presented. It can solve the problems such as low efficiency of development and difficulties in transplantation, update and reuse. The solution utilizes the reflection technology of .NET and design pattern. A typical application of the solution demonstrates that the new solution of data access layer performs better than the current N-tier architecture. More importantly, the application suggests that the new solution of data access layer can be reused effectively.
摘要Virtual machine (VM) data access control provides a cloud- computing platform with guaranteed safety. Given that the cloud platform envi- ronment is dynamically variable, static VM data access operational authorization is different from the dynamic cloud platform environment in state determination. This difference affects the safety and performance of VMs in the entire cloud platform. A constraint-based VM data access control model was proposed in this study to evaluate the influence of dynamic environmental change in a cloud plat- form on VM data access control operation. The state information of the dynamic cloud environment was considered a constraint evaluation function. The model realized organic integration of static Bell-LaPadula model safety level and dynamic cloud platform environmental information. A safety policy of VM data access control operation was established, and the capability of the constraint- based access control model to improve the safety of VMs was verified. A model implementation framework and the main functions in combination with the proposed model were realized. The effectiveness and performance of the constraint-based VM data access control model were also evaluated. Results showed that the performance loss was within 7% when the constrained VM data access control model was used for operations, such as VM management. The test of communication intensive workload of a VM indicated that the operating time of the model was increased by approximately 4%. The constraint-based VM data access control model in cloud platform could adapt to the complex dynamic cloud platform environment and improve the safety of VMs. This study provided tech- nical and theoretical bases for VM data access control in cloud platform.
基金Tianjin Philosophy and Social Science Planning Project(Project No.:TJFXQN25-05)。
摘要Government access to platform-held data is increasingly implemented not through isolated requests but through durable interfaces:dashboards,periodic reporting pipelines and application programming interfaces.This shift changes the object of legality.A single request can be assessed by asking whether a stated purpose justifies the particular disclosure.A standing interface,by contrast,creates an ongoing access capability whose intrusiveness accumulates through repetition,aggregation and time.This article develops a three-axis model for encoding the requirement of minimum necessity at the configuration layer of such interfaces.The model treats data fields,extraction frequency and temporal persistence as the minimal auditable surface of standing access,while requiring purpose,recipients,selectors and onward sharing to be recorded in the same authorisation schedule.Using Chinese administrative interface governance as a stress test,especially health-code pipelines and ride-hailing supervisory feeds,the article shows how lawful or plausible access channels can drift through field accretion,cadence escalation and retention extension.EU and US materials are used as design exemplars rather than as complete solutions,illustrating the importance of reasoned requests,strict-necessity limits,duration sensitivity and auditable safeguards.The article concludes by proposing a procedural toolkit:reasoned authorisations,versioned parameter sheets,access logs,renewal triggers,independent audit and remedies for drift.Where feasible,a policy-as-code counterpart can make authorised limits executable at the gateway.
基金supported by the Meteorological Soft Science Project(Grant No.2023ZZXM29)the Natural Science Fund Project of Tianjin,China(Grant No.21JCYBJC00740)the Key Research and Development-Social Development Program of Jiangsu Province,China(Grant No.BE2021685).
摘要As the risks associated with air turbulence are intensified by climate change and the growth of the aviation industry,it has become imperative to monitor and mitigate these threats to ensure civil aviation safety.The eddy dissipation rate(EDR)has been established as the standard metric for quantifying turbulence in civil aviation.This study aims to explore a universally applicable symbolic classification approach based on genetic programming to detect turbulence anomalies using quick access recorder(QAR)data.The detection of atmospheric turbulence is approached as an anomaly detection problem.Comparative evaluations demonstrate that this approach performs on par with direct EDR calculation methods in identifying turbulence events.Moreover,comparisons with alternative machine learning techniques indicate that the proposed technique is the optimal methodology currently available.In summary,the use of symbolic classification via genetic programming enables accurate turbulence detection from QAR data,comparable to that with established EDR approaches and surpassing that achieved with machine learning algorithms.This finding highlights the potential of integrating symbolic classifiers into turbulence monitoring systems to enhance civil aviation safety amidst rising environmental and operational hazards.
摘要Modern information systems require the orchestration of ontologies,conceptual data modeling techniques,and efficient data management so as to provide a means for better informed decision-making and to keep up with new requirements in organizational needs.A major question in delivering such systems,is which components to design and put together to make up the required“knowledge to data”pipeline,as each component and process has trade-offs.In this paper,we introduce a new knowledge-to-data architecture,KnowID.It pulls together both recently proposed components and we add novel transformation rules between Enhanced Entity-Relationship(EER)and the Abstract Relational Model to complete the pipeline.KnowID’s main distinctive architectural features,compared to other ontology-based data access approaches,are that runtime use can avail of the closed world assumption commonly used in information systems and of full SQL augmented with path queries.
摘要MORPAS is a special GIS (geographic information system) software system, based on the MAPGIS platform whose aim is to prospect and evaluate mineral resources quantificationally by synthesizing geological, geophysical, geochemical and remote sensing data. It overlays geological database management, geological background and geological abnormality analysis, image processing of remote sensing and comprehensive abnormality analysis, etc.. It puts forward an integrative solution for the application of GIS in basic-level units and the construction of information engineering in the geological field. As the popularization of computer networks and the request of data sharing, it is necessary to extend its functions in data management so that all its data files can be accessed in the network server. This paper utilizes some MAPGIS functions for the second development and ADO (access data object) technique to access multi-source geological data in SQL Server databases. Then remote visiting and congruous management will be realized in the MORPAS system.
摘要Researchers have devised a system to recover targeted files from 200 megabytes of data encoded in DNA.Random access is a key for a practical DNA-based memory,but until now,researchers have been able to achieve it with only up to 0.15 megabytes of data.DNA data storage involves translating the binary 0s and 1s of digital data into sequences of the four bases A,C,G,and T that make up DNA.
基金Projects(41572317,51374242)supported by the National Natural Science Foundation of ChinaProject(2015CX005)supported by the Innovation Driven Plan of Central South University,China
摘要Data organization requires high efficiency for large amount of data applied in the digital mine system. A new method of storing massive data of block model is proposed to meet the characteristics of the database, including ACID-compliant, concurrency support, data sharing, and efficient access. Each block model is organized by linear octree, stored in LMDB(lightning memory-mapped database). Geological attribute can be queried at any point of 3D space by comparison algorithm of location code and conversion algorithm from address code of geometry space to location code of storage. The performance and robustness of querying geological attribute at 3D spatial region are enhanced greatly by the transformation from 3D to 2D and the method of 2D grid scanning to screen the inner and outer points. Experimental results showed that this method can access the massive data of block model, meeting the database characteristics. The method with LMDB is at least 3 times faster than that with etree, especially when it is used to read. In addition, the larger the amount of data is processed, the more efficient the method would be.
基金This work was supported by the National Key R&D Program of China(No.2018YFB1700100)the National Natural Science Foundation of China(No.61873317)。
摘要To address the private data management problems and realize privacy-preserving data sharing,a blockchain-based transaction system named Ecare featuring information transparency,fairness and scalability is proposed.The proposed system formulates multiple private data access control strategies,and realizes data trading and sharing through on-chain transactions,which makes transaction records transparent and immutable.In our system,the private data are encrypted,and the role-based account model ensures that access to the data requires owner’s authorization.Moreover,a new consensus protocol named Proof of Transactions(PoT)proposed by ourselves has been used to improve consensus efficiency.The value of Ecare is not only that it aggregates telemedicine,data transactions,and other features,but also that it translates these actions into transaction events stored in the blockchain,making them transparent and immutable to all participants.The proposed system can be extended to more general big data privacy protection and data transaction scenarios.
基金the National Natural Science Foundation of China(Grant Numbers 622724786210245062102451).
摘要With the rapid advancement of cloud computing technology,reversible data hiding algorithms in encrypted images(RDH-EI)have developed into an important field of study concentrated on safeguarding privacy in distributed cloud environments.However,existing algorithms often suffer from low embedding capacities and are inadequate for complex data access scenarios.To address these challenges,this paper proposes a novel reversible data hiding algorithm in encrypted images based on adaptive median edge detection(AMED)and ciphertext-policy attributebased encryption(CP-ABE).This proposed algorithm enhances the conventional median edge detection(MED)by incorporating dynamic variables to improve pixel prediction accuracy.The carrier image is subsequently reconstructed using the Huffman coding technique.Encrypted image generation is then achieved by encrypting the image based on system user attributes and data access rights,with the hierarchical embedding of the group’s secret data seamlessly integrated during the encryption process using the CP-ABE scheme.Ultimately,the encrypted image is transmitted to the data hider,enabling independent embedding of the secret data and resulting in the creation of the marked encrypted image.This approach allows only the receiver to extract the authorized group’s secret data,thereby enabling fine-grained,controlled access.Test results indicate that,in contrast to current algorithms,the method introduced here considerably improves the embedding rate while preserving lossless image recovery.Specifically,the average maximum embedding rates for the(3,4)-threshold and(6,6)-threshold schemes reach 5.7853 bits per pixel(bpp)and 7.7781 bpp,respectively,across the BOSSbase,BOW-2,and USD databases.Furthermore,the algorithm facilitates permission-granting and joint-decryption capabilities.Additionally,this paper conducts a comprehensive examination of the algorithm’s robustness using metrics such as image correlation,information entropy,and number of pixel change rate(NPCR),confirming its high level of security.Overall,the algorithm can be applied in a multi-user and multi-level cloud service environment to realize the secure storage of carrier images and secret data.