A Geometric Approach for Generalized Encrypted Control of Networked Dynamical Systems

该资助的重点是建立方法，以加强网络安全的网络运动控制系统利用有点同态加密。工业4.0将利用当今的信息技术，将传统的自动化系统转变为高效的网络物理系统。自动化系统架构的快速转型带来了过去不存在的网络安全风险。虽然对通信层面的网络物理系统保护进行了广泛研究，但在运动控制层面的保护研究方面仍存在空白。允许对运动控制器的恶意系统识别和数据泄露攻击将导致a）控制器架构、增益和模型的泄漏，B）马达命令和监视信号的拦截，以及c）由于控制器增益的伪造而导致的系统中断。该方法将对控制算法、传感器信号、模型参数和反馈增益进行加密，并在密文空间中对伺服系统的运动命令进行必要的计算，而不会出现安全漏洞。该项目特别研究加密运动控制系统，包括单边远程装配系统和双边遥操作系统。该研究项目的成功将通过改变当前用于配置网络自动化系统的运动控制实践来促进创新，这将对未来基础设施和工厂自动化的发展产生积极影响。该项目将把目前的系统动力学和控制教育转变为明确和强烈强调网络安全的教育。 该项目将进行独特的跨学科研究，涵盖系统动力学，控制，通信和网络安全工程。加密的控制框架配置运动系统，具有针对数据泄露和系统识别攻击的改进的鲁棒性。限制性能的计算负荷和信号量化方面的因素将被表征。特别是，安全参数，如加密密钥长度与有点同态加密将通过分析安全性和计算稳定性之间的权衡来确定。表达式树方法将有效地表征控制方案的不同代数表达式如何影响有点同态加密的完整性。动态密钥管理和基于干扰观测的攻击检测将被开发作为额外的安全措施。该技术的有效性将使用网络控制平台来证明。未来，加密控制框架可能会与具有过程行为监控功能的多层安全措施相结合。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This grant focuses on establishing methods to enhance cybersecurity for networked motion-control systems utilizing somewhat homomorphic encryption. Industry 4.0 will transform the conventional automation systems to efficient cyber-physical systems by taking advantage of today’s information technology. Rapidly transforming automation system architecture introduces cybersecurity risks that did not exist in the past. While protection of cyber-physical systems at the communication level has been extensively studied, there is a void in the study of protection at the motion control level. Allowing malicious system identification and data breach attacks to a motion controller would result in a) leaking of controller architecture, gains, and models, b) interception of motor commands and monitoring signals, and c) system disruption due to falsification of controller gains. The projected approach will encrypt control algorithms, sensor signals, model parameters, and feedback gains, and perform necessary computation of motion commands to servo systems in the ciphertext space without a security hole. The project in particular studies encrypted motion control systems including unilateral remote assembly systems and bilateral teleoperation systems. Success of this research project will foster innovation by changing current motion control practices for configuring networked automation systems, which would have a positive impact on the advancement of the future infrastructure and factory automation. The project will transform the current education in system dynamics and control to that with a clear and strong emphasis on cybersecurity. The project will conduct unique interdisciplinary research covering system dynamics, control, communication, and cybersecurity engineering. The encrypted control framework configures motion systems with improved robustness against data breach and system identification attacks. Factors that limit performance in terms of computational load and signal quantization will be characterized. In particular, security parameters such as cryptographic key lengths associated with somewhat homomorphic encryption will be determined by analyzing the trade-off between security and computational stability. Expression tree methods will efficiently characterize how different algebraic expressions of the control scheme impact the integrity of somewhat homomorphic encryption. Dynamic key management and attack detection based on disturbance observation will be developed as additional security measures. Efficacy of the technique will be demonstrated using the networked control platform. In the future, the encrypted control framework may be combined with multilayered security measures with monitoring of process behaviors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.