物联网感知节点可信运行关键技术研究

The trusted running of the sensing nodes is the key factor for the trusted running of Internet of things, but the existing security mechanisms are not sufficient to protect the sensing nodes, this project intends to research the trusted network access connection model for the sensing layer, the trust measurement for the sensing nodes and the privacy protection mechanisms for the data transmission to achieve the trusted running of the sensing nodes. The research includes: the trusted network connection access model for the sensing layer, which includes the identity authentication mechanism that balances security and efficiency , two-way trust authentication mechanism and the construction of trusted network; this project also researches the trust measurement mechanism of the sensing nodes, which combines the state measurement and the behavior measurement and it can effectively monitor the running status of the sensing nodes, the trust measurement of the sensing nodes can be used to implement feedback control for the sensing nodes to guarantee the trusted statuses of the sensing nodes; in order to protect the privacy of data transmission of the sensing nodes, this project researches the remote proof mechanism of the sensing nodes, using this remote proof mechanism can complete the trust proof of the node, while the private information of the node is not disclosed, and this project also researches the trusted routing for the data transmission, based on the trusted clusters, this project integrates the trust measurement and routing information of the sensing nodes, the trusted path of the data transmission can be selected, which can guarantee the trust of the data transmission routing and realize the information traceability.

物联网感知节点可信运行是物联网可信运行的关键，然而现有安全机制不足以保障感知节点可信运行，因此本课题拟研究面向感知层的通用可信网络连接模型、节点可信度量机制及节点数据传输时隐私保护机制实现感知节点可信运行。研究内容包括：面向感知层的通用可信网络连接模型，包括接入时兼顾效率和安全的身份鉴别机制、双向可信鉴别机制及可信组网机制；研究感知节点可信度量机制，融合状态可信度量和行为可信度量，有效地监控节点的可信运行状态，根据节点可信度量结果对节点进行反馈控制，保障节点运行状态可信；为了保护感知节点数据传输时的隐私，研究节点远程证明机制，完成节点可信证明的同时不泄露节点隐私信息，研究数据传输时的可信路由，以可信簇为基础，综合节点的可信度量值及路由信息选择可信的数据传输路径，实现数据传输路径的可信及信息的可信追溯。

该项目为保障物联网感知节点可信运行，从感知节点身份认证、可信度量、远程证明及可信路由四个方面研究了感知节点可信云心关键技术，为物联网的安全领域研究提供了基础理论和关键技术支持。1．针对当前物联网感知层缺乏节点可信接入机制的现状，提出了一种融合节点身份和初始状态度量的可信接入机制。该机制能够抵御伪造攻击、重放攻击、并行会话攻击及簇头信息泄露等攻击，具有前向安全性。通过计算复杂度分析可知,该机制具有更好的计算效率，功能更加全面，能够提供更好的安全性，具备灵活的环境适应性。2．针对物联网感知节点缺乏动态可信度量模型的现状，通过引入数据发送行为可信度量函数、可信风险评估函数及反馈控制函数，从多个维度对感知节点实施动态可信度量，可以有效刻画感知节点可信值变化的情况。通过纵向时间维度的可信度计算，能有效鉴别恶意节点，并且实现了节点的反馈控制。3. 针对现有远程证明机制并不适合感知层节点现状，提出了一种基于数据发送行为的远程证明机制，该机制对证明节点的属性及数据发送行为进行抽取、度量和封装，实现数据源头的可信证明，同时证明过程中不暴露节点的隐私，也能在数据产生争议的时候对节点进行追溯；为了能够实时追踪并判断数据传输过程中节点是否可信，在节点可信度量模型基础上，基于节点可信度量值提出了一种能够向节点可信度量值进行动态追踪的远程证明方案，该机制具备匿名性、不可伪造性和可追踪性。本项目提出的两种远程证明方案具有较好的动态适应性。4．针对物联网感知层缺乏可信路由选择机制及现有路由机制适应性较差的问题，提出了一种适用于感知层节点间的可信路由模型。该模型以节点可信度量值为基础，计算节点间链路可用带宽及能量，综合考虑节点间链路可用带宽及能量对数据传输的影响，采用动态规划计算节点间数据传输的可信路径，保证感知节点间数据传输可信，同时具有低开销、高扩展性及易工程实现等特点。