面向物联网的混合式无线传感网容侵结构及关键技术研究

The project researches intrusion-tolerant architecture and key technologies for the hybrid wireless sensor networks, which are based on the typical framework of Internet of Things. The emphasis of this project lies in three aspects. First, intrusion-tolerant architecture of hybrid sensor networks is supported by undisplayed layers of transmitting sub-network and data processing center. The difficult problem concentrates on interregional hybrid network architecture regarding the Internet of things. This network has multi base station and multi type node. Its architecture is different from existed wireless sensor networks, wireless local area network and wireless ad hoc network. Second, the ability in intrusion detection and tolerance recovery should be explored. Secure access, node authentication and composable security are difficult concerns especially mobile nodes roaming across different base stations and regions. Last, compromised or destroyed node will affect network tolerance capacity under circumstances of hostile environment. The problem is that the effect on network caused by multiple compromised or destroyed nodes is not added by the influence of each node. A novel complex network model of cascading failure should be presented to describe the phenomenon of the dropping of network security and tolerance capacity. The feasibility of the project has been tested by our previous work. Some related reports of research progress also verifies the feasibility of our further study by providing key technical ways and means.

本项目以物联网应用框架为背景，研究该背景下混合式无线传感网的容忍入侵结构和容侵关键技术。本项目重点研究三个方面，首先是一种隐层支持的面向物联网的混合式传感网的容侵结构，其关键难点在于面向物联网的多基站、多类型节点的跨区域混合式网络结构，该结构区别于现存的无线传感网、无线局域网和无线ad hoc网络,因而该网络结构下的容侵的安全结构研究是新颖而且富有挑战的；其次是在该结构下挖掘移动节点在入侵检测、网络容侵能力修复方面的作用，其中移动节点跨基站、跨区域的漫游巡查，其安全接入、节点认证安全和组合安全问题是研究难点；最后，研究在恶劣环境下，节点损坏/变节对网络容侵能力的影响，其难点在于多个节点变节或者损坏对网络的影响不是单个节点影响的简单相加，网络安全及容侵能力的下降应是一类新型相继故障模型。本项目的可行性在前期研究工作中得到了验证，而相关领域的研究进展也为下一步研究的技术可行性提供了支持。

混合式无线传感网络由各类节点混合组网，并提供一种无照料部署环境，因此无法保证网络中每一个节点的安全，且安全水平最低的节点会降低整个网络的安全水平。针对混合式无线传感网络的安全问题，本项目利用物联网基础结构所提供的隐层支持，提供移动节点漫游巡查、同类节点协作以及异类节点合作相结合的方式，研究了包含容忍入侵的动态分层密钥管理框架及容忍入侵的节点协作认证方法，为混合式传感网提供基础的安全架构。依托该安全结构，研究了检测内部攻击的入侵检测和移动攻击的入侵容忍方法。并在此基础上，研究基于复杂网络的混合式传感网的容侵性能评估方法，为网络重构和再生资源的增加提供量化依据。最后研究了移动节点作为代替资源的系统再生方法。通过上述研究，解决了混合式传感网中容忍入侵的多类型节点的双向认证、基于移动节点和静态网络交互的入侵检测、基于混合式传感网系统容侵能力的复杂网络建模以及移动节点权限的管理与多移动节点之间的协商机制等关键问题和技术，从理论上为面向物联网的多基站、多类型节点的跨区域混合式网络的容侵安全提供了基础与保障。