| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 9.62 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
O Departamento de Engenharia Eletrotécnica (DEE) tem vindo a desenvolver uma
aplicação informática dedicada à gestão do equipamento do departamento. Uma
vez que esta aplicação é desenvolvida e administrada por várias pessoas do próprio
departamento, sentiu-se a necessidade de implementar mecanismos que reforcem as
garantias de integridade dos dados, assim como de não repudiação das operações
efetuadas pelos utilizadores da aplicação.
Assim, nesta dissertação, foram consideradas e analisadas diversas abordagens
para alcançar esse fim. Foram estudados e comparados diferentes algoritmos uti lizados no processo de assinatura digital; os diferentes tipos de redes blockchain
existentes e as plataformas que permitem a sua implementação; bem como outras
tecnologias emergentes, tais como bases de dados imutáveis, com especial ênfase no
caso particular do sistema de gestão de base de dados (SGBD) Immudb.
O desenvolvimento da solução proposta exigiu a análise da aplicação existente no
DEE. Nesse processo, foram também adicionadas novas funcionalidades à aplicação,
cuja integração estava pendente, tais como um sistema de reporte e acompanha mento da resolução de problemas no equipamento e um sistema de requisição de
equipamento. Os resultados dessa tarefa são apresentados neste documento.
Numa primeira abordagem ao problema, foi implementada uma solução baseada
no envio de mensagens de correio eletrónico como confirmação das operações, que
o utilizador poderá usar como prova da operação efetuada. Contudo, esta solução
apresenta várias limitações, nomeadamente a dificuldade de implementação de um
esquema de verificação da integridade global dos dados para os gestores do sistema,
além de não impedir a eventual repudiação da autoria das operações registadas na
base de dados.
A segunda solução implementada baseia-se em dois aspetos chave: na assinatura
digital de todos os pedidos de inserção, edição ou eliminação de dados; na replicação
de dados do servidor principal, que recorre ao SGBD MariaDB para a gestão da
base de dados, para uma base de dados imutável armazenada no SGBD Immudb.
Por fim, foi analisado o impacto destas alterações no desempenho da aplicação.
The Department of Electrical Engineering (DEE) has been developing a computer application dedicated to managing the department’s equipment. Since this appli cation is developed and administered by several people in the department, there was a need to implement mechanisms to reinforce guarantees of data integrity and non-repudiation of operations carried out by the users of the application. Therefore, this dissertation considered and analyzed several approaches to achieve this goal. Different algorithms used in the digital signature process were studied and compared; the different types of existing blockchain networks and the platforms that enable their implementation; as well as other emerging technologies, such as immutable databases, with special emphasis on the particular case of the Immudb database management system (DBMS). The development of the proposed solution required an analysis of DEE’s existing application. In the process, new functionalities were also added to the application, which integration was pending, such as a system for reporting and monitoring the resolution of equipment problems and an equipment requisition system. The results of this task are presented in this document. In a first stage of the problem, a solution was implemented based on sending e-mails as a confirmation of operations, which the user could use as proof of the operation carried out. However, this solution has some limitations, like the difficutly of implementing a global data integrity verification scheme for system managers, as well as not preventing the possible repudiation of the authorship of such operations recorded in the database. The second solution implemented is based on two key aspects: the digital signa ture of all requests to insert, edit or delete data of the database; the replication of data from the main server, which uses the MariaDB DBMS to manage the database, to an immutable database stored in the Immudb DMBS. Finally, the impact of these changes on the application’s performance was analyzed.
The Department of Electrical Engineering (DEE) has been developing a computer application dedicated to managing the department’s equipment. Since this appli cation is developed and administered by several people in the department, there was a need to implement mechanisms to reinforce guarantees of data integrity and non-repudiation of operations carried out by the users of the application. Therefore, this dissertation considered and analyzed several approaches to achieve this goal. Different algorithms used in the digital signature process were studied and compared; the different types of existing blockchain networks and the platforms that enable their implementation; as well as other emerging technologies, such as immutable databases, with special emphasis on the particular case of the Immudb database management system (DBMS). The development of the proposed solution required an analysis of DEE’s existing application. In the process, new functionalities were also added to the application, which integration was pending, such as a system for reporting and monitoring the resolution of equipment problems and an equipment requisition system. The results of this task are presented in this document. In a first stage of the problem, a solution was implemented based on sending e-mails as a confirmation of operations, which the user could use as proof of the operation carried out. However, this solution has some limitations, like the difficutly of implementing a global data integrity verification scheme for system managers, as well as not preventing the possible repudiation of the authorship of such operations recorded in the database. The second solution implemented is based on two key aspects: the digital signa ture of all requests to insert, edit or delete data of the database; the replication of data from the main server, which uses the MariaDB DBMS to manage the database, to an immutable database stored in the Immudb DMBS. Finally, the impact of these changes on the application’s performance was analyzed.
Description
Keywords
Database immutability integrity non-repudiation Immudb digital signature