A Geometric Approach for Generalized Encrypted Control of Networked Dynamical Systems

这项拨款的重点是建立方法，以增强网络运动控制系统的网络安全，利用某种同态加密。工业4.0将利用当今的信息技术，将传统的自动化系统转变为高效的网络物理系统。快速转变的自动化系统架构带来了过去不存在的网络安全风险。网络物理系统在通信层面的保护研究已经非常广泛，但在运动控制层面的保护研究尚属空白。允许对运动控制器进行恶意系统识别和数据泄露攻击将导致a)控制器架构、增益和模型的泄漏，b)电机命令和监控信号的拦截，以及c)由于控制器增益的伪造而导致系统中断。该方法将加密控制算法、传感器信号、模型参数和反馈增益，并在没有安全漏洞的密文空间中对伺服系统执行必要的运动命令计算。该项目特别研究加密运动控制系统，包括单边远程装配系统和双边远程操作系统。该研究项目的成功将通过改变当前配置网络自动化系统的运动控制实践来促进创新，这将对未来基础设施和工厂自动化的进步产生积极影响。该项目将把目前的系统动力学和控制教育转变为明确强调网络安全的教育。该项目将进行独特的跨学科研究，涵盖系统动力学、控制、通信和网络安全工程。加密的控制框架配置运动系统，提高了对数据泄露和系统识别攻击的鲁棒性。在计算负荷和信号量化方面限制性能的因素将被描述。特别是，安全性参数（如与某种同态加密相关的加密密钥长度）将通过分析安全性与计算稳定性之间的权衡来确定。表达式树方法将有效地描述控制方案的不同代数表达式如何影响某种同态加密的完整性。动态密钥管理和基于干扰观察的攻击检测将作为额外的安全措施发展。该技术的有效性将通过网络控制平台进行验证。在未来，加密控制框架可能会与多层安全措施相结合，以监视过程行为。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This grant focuses on establishing methods to enhance cybersecurity for networked motion-control systems utilizing somewhat homomorphic encryption. Industry 4.0 will transform the conventional automation systems to efficient cyber-physical systems by taking advantage of today’s information technology. Rapidly transforming automation system architecture introduces cybersecurity risks that did not exist in the past. While protection of cyber-physical systems at the communication level has been extensively studied, there is a void in the study of protection at the motion control level. Allowing malicious system identification and data breach attacks to a motion controller would result in a) leaking of controller architecture, gains, and models, b) interception of motor commands and monitoring signals, and c) system disruption due to falsification of controller gains. The projected approach will encrypt control algorithms, sensor signals, model parameters, and feedback gains, and perform necessary computation of motion commands to servo systems in the ciphertext space without a security hole. The project in particular studies encrypted motion control systems including unilateral remote assembly systems and bilateral teleoperation systems. Success of this research project will foster innovation by changing current motion control practices for configuring networked automation systems, which would have a positive impact on the advancement of the future infrastructure and factory automation. The project will transform the current education in system dynamics and control to that with a clear and strong emphasis on cybersecurity. The project will conduct unique interdisciplinary research covering system dynamics, control, communication, and cybersecurity engineering. The encrypted control framework configures motion systems with improved robustness against data breach and system identification attacks. Factors that limit performance in terms of computational load and signal quantization will be characterized. In particular, security parameters such as cryptographic key lengths associated with somewhat homomorphic encryption will be determined by analyzing the trade-off between security and computational stability. Expression tree methods will efficiently characterize how different algebraic expressions of the control scheme impact the integrity of somewhat homomorphic encryption. Dynamic key management and attack detection based on disturbance observation will be developed as additional security measures. Efficacy of the technique will be demonstrated using the networked control platform. In the future, the encrypted control framework may be combined with multilayered security measures with monitoring of process behaviors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.