CPS: Small: Collaborative Research: A Secure Communication Framework with Verifiable Authenticity for Immutable Services in Industrial IoT Systems

工业物联网（IIoT）系统用于各种使命和安全关键型应用，因此对底层通信基础设施的安全性提出了严格的要求。IIoT网络由多个通信方组成，并遵循双向通信模型，包括在上行链路上传输感知数据，并在下行链路上传输控制消息。外部攻击者篡改传感数据或控制消息将导致错误的决策，可能造成重大损害。最近工业自动化的趋势是将相互依赖的工业工厂连接在一起，以提供分散、可验证和不可变的服务，这进一步加剧了这一问题。该项目旨在设计1）高效的签名方案，以支持工厂内双向通信的可验证的真实性，完整性和一致性，以及2）分层和可扩展的区块链协议，以支持工厂间的不可变服务。 研究团队的密切合作将导致一个公开的IIoT支持的先进制造测试平台，在从业人员中有效传播研究成果，并启动技术转让。为了解决现有的限制，拟议的安全通信框架旨在（i）确保真实性，完整性，通过设计对签名者和验证者都快速有效的新型签名方案，在IIoT网络中实现感测数据的一致性;（ii）通过将IIoT网络的控制边界扩展到云/互联网并解决新的安全挑战，实现基于公钥密码学（PKC）的快速控制消息认证;（iii）通过开发分层区块链结构和可扩展的轻量级共识协议，提供工厂间不可变的服务。拟议的解决方案将在一个独特的支持IIoT的先进制造系统测试平台上实施和部署，以进行全面的设计验证和性能评估。 成功设计、实施和演示拟议的安全解决方案，将推动IIoT网络基础设施的采用，加速传统安全架构向PKC的转型-该奖项反映了NSF的法定使命，并通过使用基金会的知识产权进行评估，被认为值得支持。优点和更广泛的影响审查标准。

Industrial Internet of Things (IIoT) systems are used in a wide range of mission- and safety-critical applications, thus imposing stringent requirements on the security of the underlying communication infrastructure. An IIoT network consists of multiple communication parties and follows a two-way communication model, including delivering sensing data on the uplink and transmitting control messages on the downlink. Tampered sensing data or control messages by outside attackers will result in wrong decisions, potentially causing significant harm. The recent trend in industrial automation to connect interdependent industrial plants together to provide decentralized, verifiable and immutable services further exacerbates the problem. This project aims to design 1) efficient signature schemes to support verifiable authenticity, integrity, and uniformity for intra-plant two-way communications, and 2) hierarchical and scalable blockchain protocols to support inter-plant immutable services. The close collaboration of the research teams will lead to a publicly available IIoT-enabled advanced manufacturing testbed, effective dissemination of research results among practitioners, and initiation of technology transfer.To address existing limitations, the proposed secure communication framework aims to (i) ensure authenticity, integrity, and uniformity of sensing data in IIoT networks by designing novel signature schemes that are fast and efficient for both the signer and the verifier; (ii) enable public-key cryptography (PKC)-based fast control message authentication by extending the control border of IIoT networks to the cloud/Internet and solving the new security challenges; and (iii) provide inter-plant immutable services by developing a hierarchical blockchain structure and scalable lightweight consensus protocols. The proposed solutions will be implemented and deployed on a unique IIoT-enabled advanced manufacturing system testbed for thorough design validation and performance evaluation. Successful design, implementation and demonstration of the proposed security solutions should advance the adoption of IIoT network infrastructure, accelerate the transformation of legacy security architectures to PKC-based security architectures and lift the security protection of the industrial communication infrastructure to the next level.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.