NeTS-NECO: Collaborative Research: New Approaches for Secure and Dependable Distributed Data Storage and Access Control in Mission-critical Wireless Sensor Networks

近年来，无线传感器网络(WSN)中的分布式数据存储和访问在许多关键任务应用的推动下越来越流行。近年来，人们对无线传感器网络的安全性进行了广泛的研究，主要集中在网络通信安全方面，而对分布式数据存储和访问控制的安全性和可靠性却关注较少。然而，确保任务关键型应用程序中的数据安全性和可靠性至关重要，因为在这些应用程序中，数据的真实性和可用性关系到生死。该项目旨在解决这一重要挑战。一方面，研究了如何在满足容错性和抗折衷要求的同时，对传感器网络数据进行分布式存储的问题。在初始数据存储之后的动态数据安全性和可靠性问题被解决，因为随着时间的推移，传感器可能会受到损害和/或表现为拜占庭式的故障。另一方面，研究了分布式、细粒度的数据访问控制，保证传感器网络数据只能被授权的网络用户访问。考虑了最坏的情况，其中不仅传感器可能被破坏，而且网络用户可能不完全可信。提出了一种新的基于对称密钥密码学(SKC)和公钥密码学(PCK)的方法，该方法建立在对最先进的对称密钥密码学解决方案的深入安全性分析和对诸如基于密文策略和密钥策略属性的加密(即CP-ABE和KP-ABE)等最新的PKC原语的效率增强的基础上。

Distributed data storage and access in wireless sensor networks (WSNs) recently has found increased popularity driven by many mission-critical applications. While WSN security has been extensively studied in recent years with focus on network communication security, little attention has been paid on the security and dependability of distributed data storage and access control. However, it is of paramount importance to ensure data security and dependability in the mission-critical applications, where data genuineness and availability can be about life or death. This project is aimed at solving this important challenge. On the one hand, the problem of how to store the sensor network data in a distributed manner while satisfying the requirements of both fault-tolerance and compromise-resilience is studied. The problem of dynamic data security and dependability after the initial data storage is tackled as along the time sensors may be compromised and/or behave Byzantine failures. On the other hand, researches on distributed and fine-grained data access control are carried out to ensure sensor network data can only be accessed by authorized network users. The worst-case scenario is considered in which not only sensors may be compromised, but also network users may not be fully trusted. Novel symmetric key cryptography (SKC) and public key cryptography (PCK) based approaches are proposed, built on top of the in-depth security analysis of the state-of-the-art SKC solutions and efficiency enhancements over the most recent PKC primitives such as Ciphertext Policy- and Key Policy- Attribute Based Encryption, i.e., CP-ABE and KP-ABE.