本项目结合信息物理融合系统(CPS)特性和安全目标，面向行业重大应用需求，从物理感知、通信网络、应用数据三个层面研究CPS融合安全理论和技术框架，为CPS建立纵深防御的安全体系。在物理感知融合安全方面，研究轻量级密码算法和协议设计方法，设计CPS大规模信息传输的可信安全路由算法及流量深度解析的入侵检测机制，实现可靠、安全、实时的物理环境数据收集和传输；在通信网络融合安全方面，研究CPS中多域异构通信网络统一接入认证方法、设计快速无缝的漫游切换机制和有效的密钥管理方法，解决多域并存情况下用户接入认证复杂，漫游切换困难等问题；在应用数据融合安全方面，研究CPS分布式数据安全存储方法，设计安全有效的访问控制机制和用户隐私保护技术，量化评估CPS的安全风险，进而构建CPS多源异构应用数据融合安全技术框架，保障CPS应用服务中的数据安全和隐私。本项目的研究将为CPS安全建设提供全方位、综合性保障。

Complying with the requirements of characteristics and security goals of Cyber Physical System (CPS), this project begins to research on the security fusion theory and technology framework of CPS from the perspective of three aspects, including physical sensing, communications networks and application data, which is benefit to establish the defense-in-depth structure for CPS. In the physical sensing fusion security, we study the design approach of lightweight cipher algorithm and protocol, and design a trusted security routing algorithm for large-scale information transmission and a intrude detection mechanism of traffic deep analysis in CPS, which can achieve a reliable, security and real-time physical data collection and transmission. In the communications networks fusion security, we study a unified access authentication approach and design a fast seamless roaming switching mechanism and an efficient key management method in multi-domain heterogeneous communication networks, which can solve the problems such as the complex user access authentication, difficult roaming switch and so on. In application data fusion security, we study a distributed data security storage approach; design a secure access control mechanism and a user privacy protection technology and evaluate the security risk for CPS, and then construct the CPS framework of multi-source heterogeneous application data fusion security, which can ensure the data security and privacy in CPS applications. Based on all these researches, we aim at providing a comprehensive security assurance for the construction of CPS security system.