物联网感知层数据安全融合技术的研究和实现

发布时间：2018-10-25 11:18

【摘要】：物联网是新一代通信技术的重要组成部分,其应用领域涉及军事、商业、工业、交通、医学等方面。物联网的感知层通常由感知节点组成,具有自组织、大规模、低功耗和低计算存储能力等特性。感知层节点分布密集,大量无线信号同步传输易造成网络拥塞,导致网络丢包率的提高。同时,感知节点由于构造简单,价格低廉,其能量有限,过多的传输开销会导致节点资源的快速消耗。因此,数据融合技术是物联网感知层的关键技术之一,它对于提高网络效率,延长网络生命周期是非常有效的,但无论是通信信道还是感知层节点本身均易受到恶意攻击,从而使得数据融合技术在减少网络传输开销的同时也带来安全隐患,为此,本文在分析和比较多种安全融合算法优缺点的基础上,设计了两种安全融合算法。针对经典算法CMT存在的ID号传输开销过大的问题,设计了一种基于分组压缩和自动纠错的数据安全融合算法EDCSDA。在该算法中,融合节点利用排列组合对参与融合的子节点的ID号进行编码。编码之后,再将结果按照多跳的方式向基站传输,基站按照一定的规则进行解码。通过matlab仿真证明该算法传输开销远小于CMT算法。针对现有的安全融合算法密钥分配和密钥管理机制较为复杂的问题,设计一种无需分配密钥的近似融合算法PADSA。通过对节点采集数据服从的概率分布模型进行分析,在原始采集数据的基础上叠加扰动数据,起到隐藏原始数据的效果。同时通过数学证明了基站在拥有大量节点数据情况下可以很好的还原真实数据的统计结果,而簇头在拥有少量节点数据的情况下无法恢复数据。设计并实现了物联网感知层测试床系统,并在该系统上进行了测试。测试结果证明了两种算法的可行性,同时证明了这两种算法可以在保证安全性的同时切实减少网络的传输开销。
[Abstract]:The Internet of things (IOT) is an important part of the new generation of communication technology, and its applications include military, commercial, industrial, transportation, medicine and so on. The sensing layer of the Internet of things is usually composed of perceptual nodes, which has the characteristics of self-organization, large-scale, low power consumption and low computing storage capacity. Perception layer nodes are densely distributed, and a large number of wireless signal synchronous transmission can lead to network congestion, resulting in the increase of packet loss rate. At the same time, because of its simple structure, low cost and limited energy, excessive transmission overhead will lead to fast consumption of node resources. Therefore, data fusion is one of the key technologies in the perception layer of the Internet of things. It is very effective for improving the network efficiency and prolonging the network life cycle. However, both the communication channel and the sensing layer nodes are vulnerable to malicious attacks. So data fusion technology can reduce the overhead of network transmission and bring security hidden trouble. Therefore, based on the analysis and comparison of the advantages and disadvantages of many security fusion algorithms, two security fusion algorithms are designed in this paper. Aiming at the problem that the transmission overhead of ID number is too high in the classical algorithm CMT, a data security fusion algorithm EDCSDA. based on packet compression and automatic error correction is designed. In this algorithm, the fusion nodes use permutation and combination to encode the ID number of the sub-nodes involved in the fusion. After coding, the result is transmitted to the base station in multi-hop mode, and the base station decodes according to certain rules. Matlab simulation shows that the transmission overhead of this algorithm is much smaller than that of CMT algorithm. In order to solve the complex problem of key distribution and key management mechanism of existing secure fusion algorithms, an approximate fusion algorithm PADSA. is designed. Based on the analysis of the probability distribution model of the node data acquisition, the effect of hiding the original data can be achieved by superimposing the disturbed data on the basis of the original data collection. At the same time, it is proved by mathematics that the base station has a large number of node data, but the cluster head can not restore the data in the case of a small number of node data. This paper designs and implements the test bed system of the perception layer of the Internet of things, and tests it on the system. The test results prove the feasibility of the two algorithms, and prove that the two algorithms can effectively reduce the transmission overhead while ensuring the security.
【学位授予单位】：东南大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TP391.44;TN929.5;TP202

【相似文献】