Security protection method based on mimic defense and Paillier encryption for smart IoT terminals

GU Tiansheng; ZENG Fukang; SHAO Sisi; NIE Yijun; JI Zongkai; ZHENG Yulu; SHI Yuchen; LIU Shangdong; JI Yimu

doi:10.11959/j.issn.2096-109x.2024088

您当前的位置：

首页 >

文章列表页 >

Security protection method based on mimic defense and Paillier encryption for smart IoT terminals

Papers | 更新时间：2025-02-06

- Security protection method based on mimic defense and Paillier encryption for smart IoT terminals
- Chinese Journal of Network and Information Security Vol. 10, Issue 6, Pages: 164-176(2024)
- 作者机构：
  
  1.南京邮电大学计算机学院、软件学院、网络空间安全学院，江苏南京 210023
  2.南京邮电大学物联网学院，江苏南京 210023
  3.南京邮电大学高性能计算与大数据处理研究所，江苏南京 210023
  4.国家高性能计算中心南京分中心，江苏南京 210023
- 作者简介：
- 基金信息：
  
  The National Natural Science Foundation of China(62176264);The National Key R&D Program of China(2023YFB2904000;2023YFB2904004);Jiangsu Key Development Planning Project(BE20230042);Natural Science Foundation of Jiangsu Province (Higher Education Institutions)(20KJA520001);2023 Technology Project of China Telecom Co., Ltd. Jiangsu Branch(JSSGS2301022EGN00);Future Network Scientific Research Foundation Project(FNSRFP-2021-YB-15)
- DOI：10.11959/j.issn.2096-109x.2024088
  CLC： TP393
- Received：29 March 2024，
  
  Revised：2024-09-10，
  
  Published：25 December 2024
- 稿件说明：
移动端阅览
顾天晟, 曾福康, 邵思思, 等. 基于拟态防御和Paillier加密的智能物联网终端安全防护方法[J]. 网络与信息安全学报, 2024, 10(6): 164-176.

GU T S, ZENG F K, SHAO S S, et al. Security protection method based on mimic defense and Paillier encryption for smart IoT terminals[J]. Chinese Journal of Network and Information Security, 2024, 10(6): 164-176.
顾天晟, 曾福康, 邵思思, 等. 基于拟态防御和Paillier加密的智能物联网终端安全防护方法[J]. 网络与信息安全学报, 2024, 10(6): 164-176. DOI： 10.11959/j.issn.2096-109x.2024088.

GU T S, ZENG F K, SHAO S S, et al. Security protection method based on mimic defense and Paillier encryption for smart IoT terminals[J]. Chinese Journal of Network and Information Security, 2024, 10(6): 164-176. DOI： 10.11959/j.issn.2096-109x.2024088.

摘要

智能物联网具有高灵活性、自适应性、持续演化等特性，为用户带来更加极致的体验的同时也带来了新的挑战，智能物联网难以杜绝的未知漏洞和后门等不确定威胁导致的物联网边域智能终端内生安全问题和安全传输问题正备受关注。为此，提出了一种基于拟态防御和Paillier加密的智能物联网终端安全防护方法。首先，基于拟态防御理论构建了智能物联网终端安全防护架构，以确保边域智能终端在自身存在安全基因缺陷时仍能保障系统的可靠性和鲁棒性。然后，在该架构中设计了一种基于Paillier加密的安全盲签名（SBSPE

secure blind signing with paillier encryption）算法，以确保边域智能终端在数据处理全流程中的数据与隐私安全。SBSPE算法在Paillier半同态加密算法的基础上引入盲签名技术，在对数据加密的同时基于盲因子技术进行盲签名，使攻击者即使获得Paillier加密算法的解密密钥，也无法解密密文信息，有效支撑了智能物联网设备的数据高效、可靠传输。最后，以拟态智能物联网系统为应用场景，从性能和安全两方面对基于拟态防御的智能物联网终端半同态加密传输方法进行理论分析和实验验证，证明所提方法的有效性和安全性。

Abstract

Smart internet of things (IoT)

with its high flexibility

adaptability

and continuous evolution

brings both new challenges and enhanced user experiences. In particular

the endogenous security and secure transmission issues faced by IoT edge-area smart terminals

due to uncertain threats like unknown vulnerabilities and backdoors

are of considerable concern in the realm of smart IoT. To address these challenges

a security protection method based on mimic defense and Paillier encryption for smart IoT terminals was proposed. First

a security architecture was constructed based on the mimic defense theory to ensure the reliability and robustness of the system even when the edge domain smart terminal had its own security genetic defects. Then

a secure blind signature with Paillier encryption (SBSPE) algorithm was designed in this architecture to safeguard the data and privacy of the edge-area smart terminals throughout the data processing lifecycle of edge-area smart terminals. Blind signature technology was integrated into SBSPE algorithm on the basis of Paillier semi-homomorphic encryption algorithm. During data encryption

it employed blind factor technology to execute a blind signature

rendering ciphertext information indecipherable even if an attacker obtained access to the decryption key of the Paillier encryption algorithm. It also effectively supported the efficient and reliable transmission of data of the intelligent IoT devices. Finally

taking the mimic smart IoT system as an application scenario

the proposed method was theoretically analyzed and experimentally validated for its improved performance and security.

关键词

Keywords

references

LAGHARI A A , WU K , LAGHARI R A , et al . A review and state of art of internet of things (IoT) [J ] . Archives of Computational Methods in Engineering , 2021 : 1 - 19 .

郭斌 , 刘思聪 , 刘琰等 . 智能物联网：概念、体系架构与关键技术 [J ] . 计算机学报 , 2023 , 46 ( 11 ): 2259 - 2278 .

GUO B , LIU S C , LIU Y , et al . AIoT: the concept, architecture and key techniques [J ] . Chinese Journal of Computers , 2023 , 46 ( 11 ): 2259 - 2278 .

QADRI Y A , NAUMAN A , ZIKRIA Y B , et al . The future of healthcare internet of things: a survey of emerging technologies [J ] . IEEE Communications Surveys & Tutorials , 2020 , 22 ( 2 ): 1121 - 1167 .

DAVIS B D , MASON J C , ANWAR M . Vulnerability studies and security postures of IoT devices: a smart home case study [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 10 ): 10102 - 10110 .

顾伟 , 沈剑 , 任勇军 . 基于智能电网的安全密钥共享算法 [J ] . 网络与信息安全学报 , 2021 , 7 ( 4 ): 141 - 146 .

GU W , SHEN J , REN Y J . Secure key-sharing algorithm based on smart grid [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 4 ): 141 - 146 .

何智旺 , 王化群 . 面向车联网的匿名组密钥分发方案 [J ] . 网络与信息安全学报 , 2023 , 9 ( 5 ): 127 - 137 .

HE Z W , WANG H Q . Anonymous group key distribution scheme for the internet of vehicles [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 5 ): 127 - 137 .

ABADIA J J P , WALTHER C , OSMAN A , et al . A systematic survey of Internet of things frameworks for smart city applications [J ] . Sustainable Cities and Society , 2022 , 83 : 103949 .

HOU R , REN G , ZHOU C , et al . Analysis and research on network security and privacy security in ubiquitous electricity internet of things [J ] . Computer Communications , 2020 , 158 : 64 - 72 .

LETAFATI M , KUHESTANI A , WONG K K , et al . A lightweight secure and resilient transmission scheme for the internet of things in the presence of a hostile jammer [J ] . IEEE Internet of Things Journal , 2020 , 8 ( 6 ): 4373 - 4388 .

NIU S F , HU Y , ZHOU S W , et al . Attribute-based searchable encryption in edge computing for lightweight devices [J ] . IEEE Systems Journal , 2023 , 17 ( 3 ): 3503 - 3514 .

WU J H , SHENG X F , LI G S , et al . An efficient and secure aggregation encryption scheme in edge computing [J ] . China Communications , 2022 , 19 ( 3 ): 245 - 257 .

杨亚涛 , 林天祥 , 陈剑源等 . 边缘计算模式下全同态加密智能合约设计 [J ] . 信息安全学报 , 2022 , 7 ( 2 ): 150 - 162 .

YANG Y T , LIN T X , CHEN J Y , et al . Smart contract with fully homomorphic encryption under edge computing mode [J ] . Journal of Cyber Security , 2022 , 7 ( 2 ): 150 - 162 .

CHEN X . A security integration model for private data of intelligent mobile communication based on edge computing [J ] . Computer Communications , 2020 , 162 : 204 - 211 .

LIANG W , XIE S , CAI J , et al . Novel private data access control scheme suitable for mobile edge computing [J ] . China Communications , 2021 , 18 ( 11 ): 92 - 103 .

YAN X , WU Q , SUN Y . A homomorphic encryption and privacy protection method based on blockchain and edge computing [J ] . Wireless Communications and Mobile Computing , 2020 , 2020 : 1 - 9 .

XU G , DONG J , MA C , et al . A certificateless signcryption mechanism based on blockchain for edge computing [J ] . IEEE Internet of Things Journal , 2023 , 10 ( 14 ): 11960 - 11974 .

AL SHAHRANI A M , RIZWAN A , SANCHEZ-CHERO M , et al . Blockchain-enabled federated learning for prevention of power terminals threats in IoT environment using edge zero-trust model [J ] . The Journal of Supercomputing , 2023 : 1 - 27 .

LIAO J , WANG H , WU J . A multikey fully homomorphic encryption privacy protection protocol based on blockchain for edge computing system [J ] . Concurrency and Computation: Practice and Experience , 2023 , 35 ( 4 ): e7539 .

王瑞锦 , 唐榆程 , 张巍琦 , 等 . 基于同态加密和区块链技术的车联网隐私保护方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 1 ): 46 - 53 .

WANG R J , TANG Y C , ZHANG W Q , et al . Privacy protection scheme for internet of vehicles based on homomorphic encryption and block chain technology [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 1 ): 46 - 53 .

CHEN W , WANG Z , GE Q , et al . Quantized distributed economic dispatch for microgrids: paillier encryption–decryption scheme [J ] . IEEE Transactions on Industrial Informatics , 2024 , 20 ( 4 ): 6552 - 6562 .

邬江兴 . 网络空间内生安全：拟态防御与广义鲁棒控制 [M ] . 北京 : 科学出版社 , 2020 : 587 – 588 .

WU J X . Endogenous security in cyberspace: mimetic defense and generalized robust control [M ] . Beijing : China Science Publishing & Media Ltd , 2020 : 587 – 588 .

ZHENG Y , LI Z , XU X , et al . Dynamic defenses in cyber security: techniques, methods and challenges [J ] . Digital Communications and Networks , 2022 , 8 ( 4 ): 422 - 435 .

普黎明 , 卫红权 , 李星 , 等 . 面向云应用的拟态云服务架构 [J ] . 网络与信息安全学报 , 2021 , 7 ( 1 ): 101 - 112 .

PU L M , WEI H Q , LI X , et al . Mimic cloud service architecture for cloud applications [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 1 ): 101 - 112 .

SHAO S S , JI Y M , ZHANG W L , et al . A DHR executor selection algorithm based on historical credibility and dissimilarity clustering [J ] . Science China Information Sciences , 2023 , 66 ( 11 ): 212304 .

TAO Y , KONG F , YU J , et al . EPPSA: efficient privacy‐preserving statistical aggregation scheme for edge computing‐enhanced wireless sensor networks [J ] . Security and Communication Networks , 2022 , 2022 ( 1 ): 7359134 .

XIE C , WENG J , ZHOU D H . Revocable identity-based fully homomorphic signature scheme with signing key exposure resistance [J ] . Information Sciences , 2022 , 594 : 249 - 263 .

HU Z X , KAIS S . A quantum encryption design featuring confusion, diffusion, and mode of operation [J ] . Scientific Reports , 2021 , 11 ( 1 ): 23774 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Network function heterogeneous redundancy deployment method based on immune algorithm

Timeout threshold estimation algorithm in mimic multiple executors architecture

Analysis of different anti-interference system models based on discrete time Markov chain

Related Author

Qingqing ZHANG

Hongbo TANG

Wei YOU

Yingle LI

Delei NIE

Obo ZHA

Chong WANG

Xin WANG

Related Institution

Economic-Technological Development Committee in Tianjin Binhai New Area

National Digital Switching System Engineering ＆ Technological R＆D Center

Information Technology Innovation Center of Tianjin Binhai New Area

⁰