On Achieving Reliable and Efficient Precondition Execution Enforcement in Internet-of-Things
On Achieving Reliable and Efficient Precondition Execution Enforcement in Internet-of-Things
复制标题
DOI：
10.1109/icc40277.2020.9148730
复制
发表时间：
2020-06
期刊：
影响因子：
--
通讯作者：
Qian Zhou;Fan Ye
中科院分区：
文献类型：
--
作者：
Qian Zhou;Fan Ye
在物联网中，通常在智能对象上执行命令之前，应首先满足某些先决条件（可能在其他对象上）以确保安全或效率。现有的工作已经实现了前置条件的自动执行：当用户发出命令时，她的设备会自动找出所有前置条件命令，并按照正确的顺序执行它们。然而，安全问题尚未被考虑：它假设用户设备诚实地遵循被告知的顺序向对象发送命令，并且对象信任用户，因此不检查先决条件是否确实满足。在本文中，我们提出了两种策略来强制前置条件执行顺序：1）Snowball 依赖于前置条件对象的签名声明； 2）洋葱使用由值得信赖的服务器加密的一次性访问令牌。我们在 20 节点测试台上进行的广泛分析和实验表明，这两种策略都是安全可靠的。 Snowball 具有更高的可用性，而 Onion 更高效、响应更快：Onion 使用 1.6/2.1 秒访问 20 个一跳/多跳对象，是 Snowball 时间的 62%/54%。
In IoT it is common that before a command can execute on a smart object, certain preconditions (on possibly other objects) should be met first to ensure safety or efficiency. Existing work has realized automatic precondition execution: when a user issues a command, her device automatically finds out all the precondition commands, and executes them in the correct order. However, security issues have not been considered: it assumes that a user device honestly follows the order it has been told to send commands to objects, and objects trust users thus do not check whether the preconditions are indeed met. In this paper we propose two strategies to enforce precondition execution order: 1) Snowball relying on signed declarations from precondition objects; 2) Onion using disposable access tokens encrypted by a trustworthy server. Our extensive analysis and experiments on a 20-node testbed show that both strategies are secure and reliable. Snowball has higher availability while Onion is more efficient and responsive: Onion uses 1.6/2.1 s to access 20 one-hop/multi-hop objects, 62%/54% of Snowball’s time.