Jeong Yoon-Su, Sim Sung-Ho
Department of Information Communication Engineering, Mokwon University, Daejeon-si 35349, Korea.
College of General Education, Semyung University, Jechon-si 27136, Korea.
Sensors (Basel). 2021 Mar 14;21(6):2049. doi: 10.3390/s21062049.
As cloud technology advances, devices such as IoT (Internet of Things) are being utilized in various areas ranging from transportation, manufacturing, energy, automation, space, defense, and healthcare. As the number of IoT devices increases, the safety of IoT information, which is vulnerable to cyber attacks, is emerging as an important area of interest in distributed cloud environments. However, integrity techniques are not guaranteed to easily identify the integrity threats and attacks on IoT information operating in the distributed cloud associated with IoT systems and CPS (Cyber-Physical System). In this paper, we propose a blockchain-based integrity verification technique in which large amounts of IoT information processed in distributed cloud environments can be guaranteed integrity in security threats related to IoT systems and CPS. The proposed technique aims to ensure the integrity of IoT information by linking information from IoT devices belonging to subgroups in distributed cloud environments to information from specific non-adjacent IoT devices and blockchain. This is because existing techniques rely on third-party organizations that the data owner can trust to verify the integrity of the data. The proposed technique identifies IoT information by connecting the paths of IoT pre- and subsequent blocks into block chains so that synchronization can be achieved between subgroups in distributed cloud environments. Furthermore, the proposed technique uses probabilistic similarity information between IoT information blocks to react flexibly to subgroups that constitute distributed clouds so that IoT information blocks are not exploited maliciously by third parties. As a result of performance evaluation, the proposed technique averaged 12.3% improvement in integrity processing time over existing techniques depending on blockchain size. Furthermore, the proposed technique has to hash the IoT information that constitutes a subgroup with probability-linked information, validating the integrity of large-capacity IoT information, resulting in an average of 8.8% lower overhead than existing techniques. In addition, the proposed technique has an average improvement of 14.3% in blockchain-based integrity verification accuracy over existing techniques, depending on the hash chain length.
随着云技术的发展，物联网（IoT）等设备正被应用于交通、制造、能源、自动化、太空、国防和医疗保健等各个领域。随着物联网设备数量的增加，易受网络攻击的物联网信息安全正成为分布式云环境中一个重要的关注领域。然而，完整性技术并不能保证轻易识别与物联网系统和网络物理系统（CPS）相关的分布式云中运行的物联网信息的完整性威胁和攻击。在本文中，我们提出了一种基于区块链的完整性验证技术，在与物联网系统和CPS相关的安全威胁中，可以保证分布式云环境中处理的大量物联网信息的完整性。所提出的技术旨在通过将分布式云环境中属于子组的物联网设备的信息与特定的非相邻物联网设备和区块链的信息相链接，来确保物联网信息的完整性。这是因为现有技术依赖于数据所有者可以信任的第三方组织来验证数据的完整性。所提出的技术通过将物联网前序和后续块的路径连接成区块链来识别物联网信息，从而在分布式云环境中的子组之间实现同步。此外，所提出的技术利用物联网信息块之间的概率相似性信息，灵活应对构成分布式云的子组，从而使物联网信息块不会被第三方恶意利用。性能评估结果表明，根据区块链大小，所提出的技术在完整性处理时间上比现有技术平均提高了12.3%。此外，所提出的技术必须用概率链接信息对构成子组的物联网信息进行哈希处理，验证大容量物联网信息的完整性，其开销比现有技术平均低8.8%。此外，根据哈希链长度，所提出的技术在基于区块链的完整性验证准确性方面比现有技术平均提高了14.3%。
