CPS: Small: Collaborative Research: A Secure Communication Framework with Verifiable Authenticity for Immutable Services in Industrial IoT Systems

CPS：小型：协作研究：工业物联网系统中不可变服务的具有可验证真实性的安全通信框架

• 批准号: 1932447
• 负责人: Chen Qian
• 金额: $ 25万
• 依托单位: University of California-Santa Cruz
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1932447&HistoricalAwards=false
• 关键词: CPS; Small; Collaborative; Research; Secure

Industrial Internet of Things (IIoT) systems are used in a wide range of mission- and safety-critical applications, thus imposing stringent requirements on the security of the underlying communication infrastructure. An IIoT network consists of multiple communication parties and follows a two-way communication model, including delivering sensing data on the uplink and transmitting control messages on the downlink. Tampered sensing data or control messages by outside attackers will result in wrong decisions, potentially causing significant harm. The recent trend in industrial automation to connect interdependent industrial plants together to provide decentralized, verifiable and immutable services further exacerbates the problem. This project aims to design 1) efficient signature schemes to support verifiable authenticity, integrity, and uniformity for intra-plant two-way communications, and 2) hierarchical and scalable blockchain protocols to support inter-plant immutable services. The close collaboration of the research teams will lead to a publicly available IIoT-enabled advanced manufacturing testbed, effective dissemination of research results among practitioners, and initiation of technology transfer.To address existing limitations, the proposed secure communication framework aims to (i) ensure authenticity, integrity, and uniformity of sensing data in IIoT networks by designing novel signature schemes that are fast and efficient for both the signer and the verifier; (ii) enable public-key cryptography (PKC)-based fast control message authentication by extending the control border of IIoT networks to the cloud/Internet and solving the new security challenges; and (iii) provide inter-plant immutable services by developing a hierarchical blockchain structure and scalable lightweight consensus protocols. The proposed solutions will be implemented and deployed on a unique IIoT-enabled advanced manufacturing system testbed for thorough design validation and performance evaluation. Successful design, implementation and demonstration of the proposed security solutions should advance the adoption of IIoT network infrastructure, accelerate the transformation of legacy security architectures to PKC-based security architectures and lift the security protection of the industrial communication infrastructure to the next level.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

工业物联网 (IIoT) 系统广泛用于任务关键型和安全关键型应用，因此对底层通信基础设施的安全性提出了严格的要求。工业物联网网络由多个通信方组成，遵循双向通信模型，包括上行传输传感数据和下行传输控制消息。外部攻击者篡改传感数据或控制消息将导致错误的决策，可能造成重大危害。工业自动化的最新趋势是将相互依赖的工业工厂连接在一起以提供分散的、可验证的和不可变的服务，这进一步加剧了这个问题。该项目旨在设计 1) 高效的签名方案，以支持工厂内双向通信的可验证真实性、完整性和一致性，2) 分层且可扩展的区块链协议，以支持工厂间的不可变服务。 研究团队的密切合作将导致公开可用的支持工业物联网的先进制造测试平台，在从业者之间有效传播研究成果，并启动技术转让。为了解决现有的限制，拟议的安全通信框架旨在（i）确保通过设计对签名者和验证者都快速有效的新颖签名方案，确保 IIoT 网络中传感数据的真实性、完整性和一致性； (ii) 通过将工业物联网网络的控制边界扩展到云/互联网并解决新的安全挑战，实现基于公钥加密（PKC）的快速控制消息认证； (iii) 通过开发分层区块链结构和可扩展的轻量级共识协议来提供工厂间的不可变服务。拟议的解决方案将在独特的支持工业物联网的先进制造系统测试平台上实施和部署，以进行彻底的设计验证和性能评估。 所提出的安全解决方案的成功设计、实施和演示将推动IIoT网络基础设施的采用，加速传统安全架构向基于PKC的安全架构的转变，并将工业通信基础设施的安全保护提升到一个新的水平。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

When Tags ‘Read’ Each Other: Enabling Low-cost and Convenient Tag Mutual Identification

当标签互相读取时：实现低成本、便捷的标签相互识别

• DOI: 10.1109/icnp.2019.8888074
• 发表时间: 2019-10
• 期刊: 2019 IEEE 27th International Conference on Network Protocols (ICNP
• 作者: Cai, Haofan;Wang, Ge;Shi, Xiaofeng;Xie, Junjie;Wang, Minmei;Qian, Chen
• 通讯作者: Qian, Chen

Concurrent Entanglement Routing for Quantum Networks: Model and Designs

量子网络的并发纠缠路由：模型和设计

• DOI: 10.1145/3387514.3405853
• 发表时间: 2020-07
• 期刊: and protocols for computer communication
• 作者: Shi, Shouqian;Qian, Chen
• 通讯作者: Qian, Chen

Monitoring Bodily Oscillation With RFID Tags

使用 RFID 标签监测身体振动

• DOI: 10.1109/jiot.2019.2892000
• 发表时间: 2019-04
• 期刊: IEEE Internet of Things Journal
• 影响因子: 10.6
• 作者: Zhang, Youlin;Chen, Shigang;Zhou, You;Fang, Yuguang;Qian, Chen
• 通讯作者: Qian, Chen

Ludo Hashing: Compact, Fast, and Dynamic Key-value Lookups for Practical Network Systems

Ludo 哈希：实用网络系统的紧凑、快速和动态键值查找

• DOI: 10.1145/3392140
• 发表时间: 2020-06
• 期刊: Proceedings of the ACM on Measurement and Analysis of Computing Systems
• 作者: Shouqian Shi; Chen Qian
• 通讯作者: Chen Qian

SICS: Secure and Dynamic Middlebox Outsourcing

SICS：安全动态的中间盒外包

• DOI: 10.1109/tnet.2020.3023386
• 发表时间: 2020-12
• 期刊: IEEE/ACM Transactions on Networking
• 作者: Wang, Huazhe;Li, Xin;Wang, Yang;Zhao, Yu;Yu, Ye;Yang, Hongkun;Qian, Chen
• 通讯作者: Qian, Chen