CPS: Small: Collaborative Research: A Secure Communication Framework with Verifiable Authenticity for Immutable Services in Industrial IoT Systems

CPS：小型：协作研究：工业物联网系统中不可变服务的具有可验证真实性的安全通信框架

• 批准号: 1932480
• 负责人: Song Han
• 金额: $ 24.99万
• 依托单位: University of Connecticut
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1932480&HistoricalAwards=false
• 关键词: CPS; Small; Collaborative; Research; Secure

Industrial Internet of Things (IIoT) systems are used in a wide range of mission- and safety-critical applications, thus imposing stringent requirements on the security of the underlying communication infrastructure. An IIoT network consists of multiple communication parties and follows a two-way communication model, including delivering sensing data on the uplink and transmitting control messages on the downlink. Tampered sensing data or control messages by outside attackers will result in wrong decisions, potentially causing significant harm. The recent trend in industrial automation to connect interdependent industrial plants together to provide decentralized, verifiable and immutable services further exacerbates the problem. This project aims to design 1) efficient signature schemes to support verifiable authenticity, integrity, and uniformity for intra-plant two-way communications, and 2) hierarchical and scalable blockchain protocols to support inter-plant immutable services. The close collaboration of the research teams will lead to a publicly available IIoT-enabled advanced manufacturing testbed, effective dissemination of research results among practitioners, and initiation of technology transfer.To address existing limitations, the proposed secure communication framework aims to (i) ensure authenticity, integrity, and uniformity of sensing data in IIoT networks by designing novel signature schemes that are fast and efficient for both the signer and the verifier; (ii) enable public-key cryptography (PKC)-based fast control message authentication by extending the control border of IIoT networks to the cloud/Internet and solving the new security challenges; and (iii) provide inter-plant immutable services by developing a hierarchical blockchain structure and scalable lightweight consensus protocols. The proposed solutions will be implemented and deployed on a unique IIoT-enabled advanced manufacturing system testbed for thorough design validation and performance evaluation. Successful design, implementation and demonstration of the proposed security solutions should advance the adoption of IIoT network infrastructure, accelerate the transformation of legacy security architectures to PKC-based security architectures and lift the security protection of the industrial communication infrastructure to the next level.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

工业物联网（IIoT）系统用于广泛的任务和安全关键应用，因此对底层通信基础设施的安全性提出了严格的要求。工业物联网网络由多个通信方组成，遵循双向通信模型，包括上行链路上的传感数据传输和下行链路上的控制消息传输。外部攻击者篡改传感数据或控制信息将导致错误的决策，可能造成重大危害。最近的工业自动化趋势是将相互依赖的工业工厂连接在一起，以提供分散的、可验证的和不可变的服务，这进一步加剧了这个问题。该项目旨在设计1)有效的签名方案，以支持工厂内双向通信的可验证真实性、完整性和一致性，以及2)分层和可扩展的区块链协议，以支持工厂间的不可变服务。研究团队的密切合作将导致一个公开可用的工业物联网先进制造测试平台，在从业者之间有效传播研究成果，并启动技术转让。为了解决现有的限制，所提出的安全通信框架旨在(i)通过设计对签名者和验证者都快速有效的新型签名方案，确保工业物联网网络中传感数据的真实性、完整性和一致性；（ii）通过将工业物联网网络的控制边界扩展到云/互联网，解决新的安全挑战，实现基于公钥加密（PKC）的快速控制消息认证；（iii）通过开发分层区块链结构和可扩展的轻量级共识协议提供工厂间不可变服务。提出的解决方案将在一个独特的支持iiot的先进制造系统测试平台上实施和部署，以进行彻底的设计验证和性能评估。所提出的安全解决方案的成功设计、实施和演示将推动工业物联网网络基础设施的采用，加速传统安全架构向基于pkc的安全架构的转变，并将工业通信基础设施的安全保护提升到一个新的水平。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

LOIS: Low-cost Packet Header Protection for IoT Devices

• DOI: 10.1145/3576842.3582380
• 发表时间: 2023-05
• 期刊: Proceedings of the 8th ACM/IEEE Conference on Internet of Things Design and Implementation
• 作者: Minmei Wang;Shouqian Shi;Xiaoxue Zhang;Song Han;Chen Qian