Trust, in an Internet of Things

我们建议研究物联网(IoT)中的信任。物联网是数十亿个半自主和自主设备的集合，这些设备相互通信，以支持对我们重要的生态系统，例如，支持医疗保健和住宅供电。信任是信息安全的基本属性，是许多有效的安全机制所依赖的属性。我们认为信任是确保物联网安全的基石，在感知物联网安全的过程中，我们提出了三个目标。一个是适合物联网的信任模型的设计、分析和开发。我们假设只需要相对较少的此类模型就可以涵盖物联网的所有应用场景，并提出实用的解决方案，并以坚实的信息安全和计算基础为基础。拟议研究计划的另一个目标是通过所谓的物理不可克隆功能(即以难以复制的方式实现的随机功能)在作为物联网设备基础的数字集成电路(IC)中以及从计算机硬件中引导信任，然后这些信任可用于引导和建立信任。我们提出的研究计划的第三个目标是信任协商，物联网设备可以通过信任协商通过仔细相互通信来建立信任。信任协商的目标是一个设备建立对另一个设备的信任，而不会损害它试图保密的属性和数据。与信任管理的第一个目标一样，我们建议为物联网中的信任协商设计有效的技术、协议和算法，以适应物联网的应用领域。我们提议的研究计划将在物联网正在进行的革命和信息安全的交汇点带来重大的技术进步，物联网革命已经在改变我们的生活。物联网的安全漏洞可能会伤害我们，例如，危及我们的医疗保健。这项研究旨在确保物联网帮助而不是伤害我们。因此，我们在这项研究中特别感兴趣的是物联网的应用场景，这些场景对加拿大人来说是日常价值：医疗保健，以及智能电视和电表等住宅系统。这项研究将从根本上改变物联网的安全态势。我们将提供可用于信任管理和谈判的软件，然后不仅可以帮助研究人员，还可以帮助从业者，因为在没有PI及其研究团队拥有的那种专业知识的情况下在内部构建这样的软件是一个巨大的挑战。拟议的研究将培训几名高素质的人员(HQP)，掌握加拿大在MASC和博士水平上的高需求技能。我们预计，我们的技术成果将在十到二十年的时间框架内发挥作用。反过来，HQP将为加拿大做出持久的贡献。

We propose to research trust, in an Internet of Things (IoT). IoT is a collection of several billion semi-autonomous, and autonomous devices, that communicate with one another in support of ecosystems that are of importance to us, for example, in support of healthcare and residential delivery of electricity. Trust is a fundamental property in information security; it is the property on which many effective security mechanisms rely. We propose that trust is a cornerstone of securing IoT, and in perceiving IoT security as such, we propose three objectives. One is the design, analysis and development of trust models that are suitable for IoT. We hypothesize that only relatively few such models are needed to encompass all the application scenarios of IoT, and propose solutions that are practical, and grounded in strong foundations of information security and computing. Another objective of the proposed research program is bootstrapping trust, both in digital Integrated Circuits (ICs), which are the basis for devices in IoT, and from computer hardware, via so-called Physical Unclonable Functions, i.e., random functions realized in a manner that is difficult to replicate, which can then be used to bootstrap and establish trust. A third objective of our proposed research program regards trust negotiation, via which IoT devices can establish trust by carefully communicating with one another. The objective of trust negotiation is that a device develops trust in another, without compromising attributes and data that it seeks to keep secret. As with our first objective on trust management, we propose to design effective techniques, protocols and algorithms for trust negotiation in IoT, that are suitable for the application domains to which IoT is targeted. Our proposed research program will bring significant technical advances at the intersection of the ongoing revolution in IoT, which is already transforming our lives, and information security. A security breach in IoT can harm us, e.g., by compromising our healthcare. This research seeks to ensure that IoT helps, and does not harm, us. Thus, of particular interest to us in this research are application scenarios for IoT that are of everyday value to Canadians: healthcare, and residential systems such as smart televisions and electric meters. This research will fundamentally transform the security posture of IoT. We will make pieces of software available for both trust management and negotiation that can then help not only researchers, but also practitioners, as it is a significant challenge to build such software in-house without the kind of expertise that the PI and his research team possess. The proposed research will train several Highly Qualified Personnel (HQP) in skills that are in high demand in Canada, at the MASc and PhD levels. We anticipate that our technical outputs will be of value in a ten- to twenty-year timeframe. The HQP, in turn, will make lasting contributions to Canada.