Trust, in an Internet of Things

物联网中的信任

• 批准号: RGPIN-2019-05634
• 负责人: Tripunitara, Mahesh
• 金额: $ 2.04万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2022
• 资助国家: 加拿大
• 起止时间: 2022-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=751663
• 关键词: Trust; Internet; Things

We propose to research trust, in an Internet of Things (IoT). IoT is a collection of several billion semi-autonomous, and autonomous devices, that communicate with one another in support of ecosystems that are of importance to us, for example, in support of healthcare and residential delivery of electricity. Trust is a fundamental property in information security; it is the property on which many effective security mechanisms rely. We propose that trust is a cornerstone of securing IoT, and in perceiving IoT security as such, we propose three objectives. One is the design, analysis and development of trust models that are suitable for IoT. We hypothesize that only relatively few such models are needed to encompass all the application scenarios of IoT, and propose solutions that are practical, and grounded in strong foundations of information security and computing. Another objective of the proposed research program is bootstrapping trust, both in digital Integrated Circuits (ICs), which are the basis for devices in IoT, and from computer hardware, via so-called Physical Unclonable Functions, i.e., random functions realized in a manner that is difficult to replicate, which can then be used to bootstrap and establish trust. A third objective of our proposed research program regards trust negotiation, via which IoT devices can establish trust by carefully communicating with one another. The objective of trust negotiation is that a device develops trust in another, without compromising attributes and data that it seeks to keep secret. As with our first objective on trust management, we propose to design effective techniques, protocols and algorithms for trust negotiation in IoT, that are suitable for the application domains to which IoT is targeted. Our proposed research program will bring significant technical advances at the intersection of the ongoing revolution in IoT, which is already transforming our lives, and information security. A security breach in IoT can harm us, e.g., by compromising our healthcare. This research seeks to ensure that IoT helps, and does not harm, us. Thus, of particular interest to us in this research are application scenarios for IoT that are of everyday value to Canadians: healthcare, and residential systems such as smart televisions and electric meters. This research will fundamentally transform the security posture of IoT. We will make pieces of software available for both trust management and negotiation that can then help not only researchers, but also practitioners, as it is a significant challenge to build such software in-house without the kind of expertise that the PI and his research team possess. The proposed research will train several Highly Qualified Personnel (HQP) in skills that are in high demand in Canada, at the MASc and PhD levels. We anticipate that our technical outputs will be of value in a ten- to twenty-year timeframe. The HQP, in turn, will make lasting contributions to Canada.

我们建议在物联网（IoT）中研究信任。物联网是数十亿个半自主和自主设备的集合，它们相互通信，以支持对我们至关重要的生态系统，例如，支持医疗保健和住宅供电。信任是信息安全中的一个基本属性;它是许多有效安全机制所依赖的属性。我们认为信任是保护物联网的基石，在感知物联网安全性方面，我们提出了三个目标。一是设计、分析和开发适合物联网的信任模型。我们假设只需要相对较少的此类模型就可以涵盖物联网的所有应用场景，并提出实用的解决方案，并以信息安全和计算的强大基础为基础。拟议研究计划的另一个目标是引导信任，无论是在数字集成电路（IC），这是物联网设备的基础，并从计算机硬件，通过所谓的物理不可克隆功能，即，随机函数以难以复制的方式实现，然后可用于引导和建立信任。我们提出的研究计划的第三个目标是信任协商，通过信任协商，物联网设备可以通过仔细地相互通信来建立信任。信任协商的目标是一个设备建立对另一个设备的信任，而不会损害它试图保密的属性和数据。与我们关于信任管理的第一个目标一样，我们建议为物联网中的信任协商设计有效的技术、协议和算法，这些技术、协议和算法适用于物联网所针对的应用领域。我们提出的研究计划将在物联网正在进行的革命的交叉点上带来重大的技术进步，物联网已经改变了我们的生活和信息安全。物联网中的安全漏洞可能会伤害我们，例如，通过损害我们的医疗保健。这项研究旨在确保物联网帮助而不是伤害我们。因此，我们在这项研究中特别感兴趣的是对加拿大人具有日常价值的物联网应用场景：医疗保健和智能电视和电表等住宅系统。这项研究将从根本上改变物联网的安全态势。我们将为信任管理和谈判提供软件，这些软件不仅可以帮助研究人员，还可以帮助实践者，因为在没有PI和他的研究团队所拥有的专业知识的情况下，在内部构建这样的软件是一个重大挑战。拟议的研究将培养几个高素质的人员（HQP）在加拿大的高需求的技能，在MASc和博士水平。我们预计，我们的技术产出将在十到二十年的时间内发挥价值。反过来，HQP将为加拿大做出持久的贡献。