CPS: Small: Collaborative Research: A Secure Communication Framework with Verifiable Authenticity for Immutable Services in Industrial IoT Systems

CPS：小型：协作研究：工业物联网系统中不可变服务的具有可验证真实性的安全通信框架

• 批准号: 1932480
• 负责人: Song Han
• 金额: $ 24.99万
• 依托单位: University of Connecticut
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1932480&HistoricalAwards=false
• 关键词: CPS; Small; Collaborative; Research; Secure

Industrial Internet of Things (IIoT) systems are used in a wide range of mission- and safety-critical applications, thus imposing stringent requirements on the security of the underlying communication infrastructure. An IIoT network consists of multiple communication parties and follows a two-way communication model, including delivering sensing data on the uplink and transmitting control messages on the downlink. Tampered sensing data or control messages by outside attackers will result in wrong decisions, potentially causing significant harm. The recent trend in industrial automation to connect interdependent industrial plants together to provide decentralized, verifiable and immutable services further exacerbates the problem. This project aims to design 1) efficient signature schemes to support verifiable authenticity, integrity, and uniformity for intra-plant two-way communications, and 2) hierarchical and scalable blockchain protocols to support inter-plant immutable services. The close collaboration of the research teams will lead to a publicly available IIoT-enabled advanced manufacturing testbed, effective dissemination of research results among practitioners, and initiation of technology transfer.To address existing limitations, the proposed secure communication framework aims to (i) ensure authenticity, integrity, and uniformity of sensing data in IIoT networks by designing novel signature schemes that are fast and efficient for both the signer and the verifier; (ii) enable public-key cryptography (PKC)-based fast control message authentication by extending the control border of IIoT networks to the cloud/Internet and solving the new security challenges; and (iii) provide inter-plant immutable services by developing a hierarchical blockchain structure and scalable lightweight consensus protocols. The proposed solutions will be implemented and deployed on a unique IIoT-enabled advanced manufacturing system testbed for thorough design validation and performance evaluation. Successful design, implementation and demonstration of the proposed security solutions should advance the adoption of IIoT network infrastructure, accelerate the transformation of legacy security architectures to PKC-based security architectures and lift the security protection of the industrial communication infrastructure to the next level.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

工业互联网（IIOT）系统用于广泛的任务和关键性应用程序，从而对基础通信基础设施的安全施加了严格的要求。 IIOT网络由多个通信方组成，并遵循一个双向通信模型，包括在上行链路上传递上行链路上的传感数据，并在下行链路上传输控制消息。外部攻击者篡改感应数据或控制消息将导致错误的决定，并可能造成重大伤害。工业自动化的最新趋势将相互依存的工厂连接在一起，以提供分散，可验证和不变的服务，进一步加剧了问题。该项目旨在设计1）有效的签名方案，以支持可验证的真实性，完整性和均匀性，以实现植物内的双向通信，以及2）层次和可扩展区块链协议，以支持植物间可变的服务。 研究团队的密切合作将导致公开可用的IIT高级制造测试台，有效地传播从业人员之间的研究结果，以及对技术转移的启动。为了解决现有的限制，拟议的安全沟通框架的目的是（i）确保真实性，完整性，完整性和通过在IIOT网络中的统一性和符号符号，以实现IIT网络的统一性，以实现新颖的签名和有效的符号，并有效地效果，并有效地效果很快，并有效地效果效率高效。 （ii）通过将IIOT网络的控制边界扩展到云/互联网并解决新的安全挑战，启用了基于公共钥匙加密（PKC）的快速控制消息身份验证； （iii）通过开发分层区块链结构和可扩展的轻质共识协议提供植物间不可变的服务。所提出的解决方案将在独特的IIT高级制造系统测试床上实施，并部署，以进行彻底的设计验证和性能评估。 拟议安全解决方案的成功设计，实施和演示应提高IIT网络基础架构的采用，加快将遗产安全架构转变为基于PKC的安全架构，并将工业沟通基础设施的安全保护提高到一个新的级别。该奖项反映了NSF的法定任务，反映了经过评估的范围，这是通过构成的范围来进行的。

项目成果

LOIS: Low-cost Packet Header Protection for IoT Devices

• DOI: 10.1145/3576842.3582380
• 发表时间: 2023-05
• 期刊: Proceedings of the 8th ACM/IEEE Conference on Internet of Things Design and Implementation
• 作者: Minmei Wang;Shouqian Shi;Xiaoxue Zhang;Song Han;Chen Qian

SoK: Sharding on Blockchain

• DOI: 10.1145/3318041.3355457
• 发表时间: 2019-01-01
• 期刊: AFT'19: PROCEEDINGS OF THE 1ST ACM CONFERENCE ON ADVANCES IN FINANCIAL TECHNOLOGIES
• 作者: Wang, Gang;Shi, Zhijie Jerry;Han, Song
• 通讯作者: Han, Song