NeTS-NECO: Collaborative Research: New Approaches for Secure and Dependable Distributed Data Storage and Access Control in Mission-critical Wireless Sensor Networks

在许多关键任务应用的驱动下，分布式数据存储和访问在无线传感器网络（WSNs）中越来越受欢迎。近年来，人们对无线传感器网络的安全性进行了广泛的研究，主要集中在网络通信安全方面，而对分布式数据存储和访问控制的安全性和可靠性的研究却很少。然而，在关键任务应用程序中，确保数据安全性和可靠性至关重要，因为数据的真实性和可用性可能关系到生死。该项目旨在解决这一重要挑战。一方面，研究了传感器网络数据如何以分布式方式存储，同时又能满足容错和抗妥协的要求。在初始数据存储后，动态数据的安全性和可靠性问题被解决，因为随着时间的推移，传感器可能会受到损害和/或表现出拜占庭式故障。另一方面，研究分布式、细粒度的数据访问控制，保证传感器网络数据只能被授权的网络用户访问。考虑到最坏的情况，不仅传感器可能被破坏，而且网络用户可能无法完全信任。提出了新的基于对称密钥加密（SKC）和公钥加密（PCK）的方法，建立在对最先进的SKC解决方案的深入安全分析和对最新PKC原语（如基于密文策略和密钥策略属性的加密，即CP-ABE和KP-ABE）的效率增强的基础上。

Distributed data storage and access in wireless sensor networks (WSNs) recently has found increased popularity driven by many mission-critical applications. While WSN security has been extensively studied in recent years with focus on network communication security, little attention has been paid on the security and dependability of distributed data storage and access control. However, it is of paramount importance to ensure data security and dependability in the mission-critical applications, where data genuineness and availability can be about life or death. This project is aimed at solving this important challenge. On the one hand, the problem of how to store the sensor network data in a distributed manner while satisfying the requirements of both fault-tolerance and compromise-resilience is studied. The problem of dynamic data security and dependability after the initial data storage is tackled as along the time sensors may be compromised and/or behave Byzantine failures. On the other hand, researches on distributed and fine-grained data access control are carried out to ensure sensor network data can only be accessed by authorized network users. The worst-case scenario is considered in which not only sensors may be compromised, but also network users may not be fully trusted. Novel symmetric key cryptography (SKC) and public key cryptography (PCK) based approaches are proposed, built on top of the in-depth security analysis of the state-of-the-art SKC solutions and efficiency enhancements over the most recent PKC primitives such as Ciphertext Policy- and Key Policy- Attribute Based Encryption, i.e., CP-ABE and KP-ABE.