A Geometric Approach for Generalized Encrypted Control of Networked Dynamical Systems

这笔赠款的重点是建立方法，以增强使用某种同态加密的联网运动控制系统的网络安全。工业4.0将利用当今的信息技术，将传统的自动化系统转变为高效的网络物理系统。自动化系统架构的快速转变带来了过去不存在的网络安全风险。虽然在通信层面上对网络物理系统的保护已经进行了广泛的研究，但在运动控制层面上的保护研究还是一个空白。允许对运动控制器进行恶意的系统识别和数据泄露攻击将导致a)控制器体系结构、增益和模型的泄漏，b)电机命令和监控信号的截取，以及c)由于控制器增益的篡改而导致的系统中断。该方法将对控制算法、传感器信号、模型参数和反馈增益进行加密，并在没有安全漏洞的情况下对密文空间中的伺服系统执行必要的运动命令计算。该项目特别研究加密运动控制系统，包括单边远程装配系统和双边遥操作系统。该研究项目的成功将通过改变目前配置网络自动化系统的运动控制实践来促进创新，这将对未来基础设施和工厂自动化的进步产生积极影响。该项目将把目前的系统动力学和控制教育转变为明确而强烈地强调网络安全的教育。该项目将进行独特的跨学科研究，涵盖系统动力学、控制、通信和网络安全工程。加密的控制框架配置运动系统，提高了对数据泄露和系统识别攻击的健壮性。在计算负荷和信号量化方面限制性能的因素将被描述。特别是，诸如与某种同态加密相关联的密钥长度之类的安全参数将通过分析安全性和计算稳定性之间的权衡来确定。表达式树方法将有效地表征控制方案的不同代数表达式如何影响某种同态加密的完整性。动态密钥管理和基于干扰观测的攻击检测将作为额外的安全措施开发。该技术的有效性将通过网络控制平台进行演示。未来，加密控制框架可能会与监控过程行为的多层安全措施相结合。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

This grant focuses on establishing methods to enhance cybersecurity for networked motion-control systems utilizing somewhat homomorphic encryption. Industry 4.0 will transform the conventional automation systems to efficient cyber-physical systems by taking advantage of today’s information technology. Rapidly transforming automation system architecture introduces cybersecurity risks that did not exist in the past. While protection of cyber-physical systems at the communication level has been extensively studied, there is a void in the study of protection at the motion control level. Allowing malicious system identification and data breach attacks to a motion controller would result in a) leaking of controller architecture, gains, and models, b) interception of motor commands and monitoring signals, and c) system disruption due to falsification of controller gains. The projected approach will encrypt control algorithms, sensor signals, model parameters, and feedback gains, and perform necessary computation of motion commands to servo systems in the ciphertext space without a security hole. The project in particular studies encrypted motion control systems including unilateral remote assembly systems and bilateral teleoperation systems. Success of this research project will foster innovation by changing current motion control practices for configuring networked automation systems, which would have a positive impact on the advancement of the future infrastructure and factory automation. The project will transform the current education in system dynamics and control to that with a clear and strong emphasis on cybersecurity. The project will conduct unique interdisciplinary research covering system dynamics, control, communication, and cybersecurity engineering. The encrypted control framework configures motion systems with improved robustness against data breach and system identification attacks. Factors that limit performance in terms of computational load and signal quantization will be characterized. In particular, security parameters such as cryptographic key lengths associated with somewhat homomorphic encryption will be determined by analyzing the trade-off between security and computational stability. Expression tree methods will efficiently characterize how different algebraic expressions of the control scheme impact the integrity of somewhat homomorphic encryption. Dynamic key management and attack detection based on disturbance observation will be developed as additional security measures. Efficacy of the technique will be demonstrated using the networked control platform. In the future, the encrypted control framework may be combined with multilayered security measures with monitoring of process behaviors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.