CRII: SaTC: Towards Trustworthy and Accountable IoT Data Marketplaces

该奖项全部或部分由2021年美国救援计划法案（公法117-2）资助。数十亿分布式物联网（IoT）设备每天产生的大量物联网（IoT）数据为多个领域和行业创造了前所未有的机会。物联网数据市场是使物联网数据从生成位置流向需要位置的关键平台。通过物联网数据市场，数据消费者可以获取历史或实时物联网数据流，以增强数据分析并提供创新服务，而数据提供商可以将其物联网数据货币化。然而，数据提供者和消费者之间缺乏相互信任，缺乏所有实体都信任的中央市场运营商，这是实现可信赖市场的重大障碍。该项目调查了一个值得信赖和负责任的去中心化数据市场的基础和实施，以实现安全的物联网数据共享和交易，并实施灵活的访问控制和交易后问责制。该项目与NSF的利用数据革命大创意愿景保持一致，并支持美国在服务于国家未来的大创意方面发挥领导作用的新兴机会。（区块链上的智能合约），并利用应用密码学来开发必要的扩展，以实现（i）灵活和强制的访问控制;（ii）在缺乏信任的环境中进行安全和可核查的公平交易;（iii）数据提供者的出价与数据消费者的要求之间可核查的自动匹配;以及（iv）对行为不端的数据提供者和消费者进行交易后问责。关键的设计挑战是支持这些目标，并实现可扩展性，性能以及数据事务敏感部分的机密性和隐私性。该项目为下一代网络安全专家提供培训机会。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This award is funded in whole or in part under the American Rescue Plan Act of 2021 (Public Law 117-2).The huge amounts of Internet of Things (IoT) data generated daily by billions of distributed IoT devices create unprecedented opportunities for several fields and industries. IoT data marketplaces are the key platforms to make IoT data flow from where it is generated to where it is needed. With IoT data marketplaces, data consumers can acquire historical or real-time IoT data streams to enhance data analytics and offer innovative services, whereas data providers can monetize their IoT data. However, the lack of mutual trust between data providers and consumers with the absence of a central marketplace operator trusted by all entities is a significant impediment to realizing a trustworthy marketplace. This project investigates the foundations and implementation of a trustworthy and accountable decentralized data marketplace to achieve secure IoT data sharing and trading with enforced and flexible access control and post-trading accountability. The project aligns with the NSF's Harnessing the Data Revolution Big Ideas vision and supports emerging opportunities for U.S. leadership in Big Ideas that serve the Nation's future.The project builds on the general properties of the present-day technology of trust (smart-contracts over blockchain) and utilizes applied cryptography to develop the necessary extensions to enable (i) flexible and enforced access control; (ii) secure and verifiable fair-exchange in trustless environments; (iii) verifiable automatic matching of data providers' bids to data consumers’ requests; and (iv) post-trading accountability against misbehaving data providers and consumers. Key design challenges are supporting these goals and achieving scalability, performance, and confidentiality and privacy of sensitive parts of data transactions. The project provides training opportunities for the next-generation of cybersecurity specialists. It also has the potential to unlock new opportunities in various industries by facilitating the secure and trustworthy exchange of IoT data.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.