Resilience meets secure networked control

弹性满足安全网络控制

• 批准号: 503491151
• 负责人: Professor Dr.-Ing. Tibor Jager
• 金额: --
• 依托单位: Dept. Elektrotechniek (ESAT)
• 依托单位国家: 德国
• 项目类别: Priority Programmes
• 资助国家: 德国
• 项目状态: 未结题
• 来源: https://gepris.dfg.de/gepris/projekt/503491151?language=en
• 关键词: Resilience; meets; secure; networked; control

Networked control systems are central building blocks for many technologies and often form the backbone of critical infrastructure. Many applications further involve the processing of sensitive and confidential data such as business secrets or personal data. The young but emerging field of encrypted control addresses this issue by combining control schemes with cryptosystems in such a way that confidentiality is guaranteed during the entire control loop. However, while modern cryptography offers strong resilience against attacks on the confidentiality of data, existing realizations of encrypted control are either insufficiently performant for practical use or are based on an informal ad hoc approach that does not reflect the state of the art in modern cryptography and IT security research. Thus, the young technology with great practical relevance has now reached a stage where interdisciplinary collaboration between control engineers and cryptographers is necessary in order to being able to construct systems whose performance and security goes significantly beyond the state of the art. In this project, we will develop special-purpose cryptographic techniques that are tailored to the requirements of modern networked control systems, and we will accordingly adopt the corresponding control algorithms and make them as compatible as possible with the functionalities provided by modern cryptographic techniques. To this end, we will investigate several concrete ideas on the design of special-purpose approximate homomorphic encryption schemes with post quantum security, algorithmic modifications to various modern control algorithms involving machine learning and optimization, and their realizability with modern cryptographic secure computation techniques.

网络控制系统是许多技术的核心构建模块，通常构成关键基础设施的骨干。许多应用程序还涉及处理敏感和机密数据，如商业秘密或个人数据。年轻但新兴的加密控制领域通过将控制方案与密码系统相结合来解决这个问题，从而在整个控制回路中保证机密性。然而，尽管现代密码学提供了强大的弹性来抵御对数据机密性的攻击，但现有的加密控制实现要么在实际使用中性能不足，要么基于一种非正式的临时方法，不能反映现代密码学和IT安全研究的最新水平。因此，具有重大实际意义的年轻技术现在已经达到了一个阶段，控制工程师和密码学家之间的跨学科合作是必要的，以便能够构建性能和安全性大大超过艺术状态的系统。在本项目中，我们将根据现代网络控制系统的要求开发专用密码技术，并采用相应的控制算法，使其尽可能与现代密码技术提供的功能兼容。为此，我们将研究具有后量子安全的专用近似同态加密方案的设计，对涉及机器学习和优化的各种现代控制算法的算法修改，以及它们在现代密码安全计算技术中的可实现性的几个具体思想。