物联网与智慧城市安全保障关键技术研究

项目来源

国家重点研发计划(NKRD)

项目主持人

李向阳

项目受资助机构

中国科学技术大学

立项年度

2018

立项时间

未公开

项目编号

2018YFB0803400

研究期限

未知 / 未知

项目级别

国家级

受资助金额

2180.00万元

学科

网络空间安全

学科代码

未公开

基金类别

“网络空间安全”重点专项

关键词

智慧城市 ; 安全协议 ; 安全架构 ; Smart Cties ; Security Protocol ; Security Architecture

参与者

郭星

参与机构

未公开

项目标书摘要:智慧城市是当今经济社会发展的大趋势,是运用物联网、云计算、大数据、移动互联网、空间地理信息集成等新一代信息技术,促进城市规划、建设、管理和服务智慧化的新理念和新模式。物联网已智慧城市信息服务体系的核心技术,物联网是智慧城市的关键技术支撑,智慧城市是物联网技术的综合应用载体。 本项目面向智慧城市泛在互联的复杂环境,提出智慧城市安全保障总体技术框架,提高智慧城市与物联网安全防范能力。同时结合一体化、层次化的设计思路,面向资源受限的物联网环境提出了基于标识的物联网安全体系架构。 随着越来越多的物联网设备接入到互联网中,但由于设计上的缺陷或者缺乏安全防护手段,这些暴露在公网上的物联网设备极容易受到黑客的攻击与利用。本文提出一种基于搜索的物联网设备识别框架,自动化构建物联网设备信息库,进而实现对未知新设备细粒度地自动分级识别和标定。 智慧城市的应用随着在跨服务域不可信、网络规模和复杂度进一步提升也带来了安全挑战。本项目在此背景下,研究多物联网管理域之间的受控互联互通机制与安全协议,提出基于标识的安全物联网互联互通架构,同时,设计大规模跨域信任服务机理,以在传统智慧小区、智慧家庭建设基础上实现物联网跨服务域安全性保证。针对物联网中大连接条件下异构节点的安全接入问题和现有边缘计算中存在的数据传输及中心存储的隐私泄露问题提出了相应的解决方案。

Application Abstract: Smart cities are a major trend in today's economic and social development.They are new concepts and technologies that use the new generation of information technologies such as the Internet of Things,cloud computing,big data,mobile Internet,and spatial geographic information integration to promote the wisdom of urban planning,construction,management,and services New model.The Internet of Things has become the core technology of the smart city information service system.The Internet of Things is the key technical support of the smart city,and the smart city is the comprehensive application carrier of the Internet of Things technology. Facing the ubiquitous and interconnected environment of smart cities,this project proposes the overall technical framework of smart city security assurance and improves the security prevention capabilities of smart cities and the Internet of Things.At the same time,based on the integrated and hierarchical design ideas,a resource-based IoT security architecture is proposed for resource-constrained IoT environments. As more and more IoT devices are connected to the Internet,but due to design flaws or lack of security protection measures,these IoT devices exposed on the public network are extremely vulnerable to attack and use by hackers.This article proposes a search-based IoT device identification framework that automatically builds an IoT device information database,and then implements fine-grained automatic hierarchical identification and calibration of unknown new devices. The application of smart cities has brought security challenges along with the unreliability across service domains and the further increase in network scale and complexity.In this context,the project studies the controlled interconnection and interoperability mechanism and security protocols between multiple IoT management domains,proposes an identity-based secure IoT interconnection and interworking architecture,and designs a large-scale cross-domain trust service mechanism on the basis of the construction of smart communities and smart homes,security across the service domain of the Internet of Things is guaranteed.Corresponding solutions are proposed for the problem of secure access of heterogeneous nodes under large connection conditions in the Internet of Things,and the existing data transmission in the existing edge computing and the privacy leakage of central storage.

项目受资助省

安徽省

  • 排序方式:
  • 1
  • /
  • 1.Research on Medical Security System Based on Zero Trust.

    • 关键词:
    • ;

    With the rapid development of Internet of Things technology, cloud computing, and big data, the combination of medical systems and information technology has become increasingly close. However, the emergence of intelligent medical systems has brought a series of network security threats and hidden dangers, including data leakage and remote attacks, which can directly threaten patients' lives. To ensure the security of medical information systems and expand the application of zero trust in the medical field, we combined the medical system with the zero-trust security system to propose a zero-trust medical security system. In addition, in its dynamic access control module, based on the RBAC model and the calculation of user behavior risk value and trust, an access control model based on subject behavior evaluation under zero-trust conditions (ABEAC) was designed to improve the security of medical equipment and data. Finally, the feasibility of the system is verified through a simulation experiment.

    ...
  • 排序方式:
  • 1
  • /