NeTS-NECO: Collaborative Research: New Approaches for Secure and Dependable Distributed Data Storage and Access Control in Mission-critical Wireless Sensor Networks

分布式数据存储和访问的无线传感器网络（WSNs）最近发现越来越受欢迎的许多关键任务的应用。近年来，无线传感器网络的安全问题得到了广泛的研究，主要集中在网络通信安全方面，而对分布式数据存储和访问控制的安全性和可靠性研究较少。然而，确保关键任务应用程序中的数据安全性和可靠性至关重要，其中数据的准确性和可用性可能关乎生死。该项目旨在解决这一重大挑战。一方面，研究了如何在满足容错性和抗损害性要求的同时，以分布式方式存储传感器网络数据的问题。初始数据存储后的动态数据安全性和可靠性的问题被处理为沿着时间传感器可能会受到损害和/或表现拜占庭故障。另一方面，对分布式细粒度数据访问控制进行了研究，以保证传感器网络数据只能被授权的网络用户访问。最坏的情况下，不仅传感器可能会受到损害，而且网络用户可能不完全信任。提出了基于对称密钥加密（SKC）和公钥加密（PCK）的新方法，该方法建立在对最先进的SKC解决方案的深入安全性分析和对最新的PKC原语（诸如基于密文策略和密钥策略的属性加密，即，CP-ABE和KP-ABE。

Distributed data storage and access in wireless sensor networks (WSNs) recently has found increased popularity driven by many mission-critical applications. While WSN security has been extensively studied in recent years with focus on network communication security, little attention has been paid on the security and dependability of distributed data storage and access control. However, it is of paramount importance to ensure data security and dependability in the mission-critical applications, where data genuineness and availability can be about life or death. This project is aimed at solving this important challenge. On the one hand, the problem of how to store the sensor network data in a distributed manner while satisfying the requirements of both fault-tolerance and compromise-resilience is studied. The problem of dynamic data security and dependability after the initial data storage is tackled as along the time sensors may be compromised and/or behave Byzantine failures. On the other hand, researches on distributed and fine-grained data access control are carried out to ensure sensor network data can only be accessed by authorized network users. The worst-case scenario is considered in which not only sensors may be compromised, but also network users may not be fully trusted. Novel symmetric key cryptography (SKC) and public key cryptography (PCK) based approaches are proposed, built on top of the in-depth security analysis of the state-of-the-art SKC solutions and efficiency enhancements over the most recent PKC primitives such as Ciphertext Policy- and Key Policy- Attribute Based Encryption, i.e., CP-ABE and KP-ABE.