物联网中无可信权威中心的隐私保护数据聚合方案

A Novel Privacy-Preserving Data Aggregation Scheme Without Trusted Authority in IoT

针对物联网数据收集过程中的隐私保护问题,提出了一个无可信权威中心的隐私保护数据聚合方案.首先,在不依赖可信权威中心的前提下,终端设备之间利用密钥交换算法生成共享秘钥并构建加密密钥,保证上报数据的隐私性;其次,根据Carmichael定理设计了一种容错机制,当终端设备故障或者网络连接出错时,控制中心仍然可以对已接收数据进行聚合统计;此外,采用批量验证的方式保证上报数据的完整性.最后,理论分析证明了本文方案的正确性和安全性.性能实验表明,相比于已有方案,所需的计算开销较低,而为了具备容错能力和提升数字签名的验证效率,增加了部分通信开销.

Aiming at the privacy protection problem in the process of IoT data collection, this paper proposes a novel privacy-preserving data aggregation scheme without a trusted authority.Firstly, without relying on a trusted authority, terminal devices use a key exchange algorithm to generate shared secret and construct an encryption key to ensure the privacy of the reported data.Secondly, a fault-tolerant mechanism is designed based on Carmichael’s theorem.When a terminal device malfunctions or the network connection fails, the control center can still aggregate statistics on the received data.In addition, batch verification is used to ensure the integrity of the reported data.Finally, theoretical analysis demonstrates the correctness and the security of the proposed scheme.Performance experiments show that the proposed scheme performs better than the other existing schemes in term of the computational overhead, while in order to enable fault tolerance and improve the verification efficiency of digital signature, the scheme requires additional communication overhead.