IoT Replica Voting for FDI-Resistant Communication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cyber-physical systems (CPS) in electric vehicle charging infrastructure are vulnerable to sophisticated cyber-attacks, particularly false data injection (FDI) attacks, which disrupt frequency regulation and degrade system performance, and current defense strategies are costly, complex, or degrade system performance.
Innovation Solution
Implement a decentralized Moving Target Defense (MTD) framework with two additional layers: Random Replica Activation (RRA) and Majority Vote Input (MVI) to enhance security, using IoT devices to replicate and randomly activate subsets of data transmission, ensuring secure communication without degrading system performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decentralized MTD framework with RRA and MVI layers is implemented, then security against FDI attacks is improved, but device complexity increases
Solution Approach 1:
The system segments the IoT device functionality into multiple independent replicas, each capable of receiving and processing data separately. This segmentation allows the system to distribute the security burden across multiple instances while maintaining individual simplicity, resolving the contradiction between enhanced security and device complexity.
Solution Approach 2:
The patent creates multiple copies (replicas) of the IoT device that perform identical functions. These replicas receive data through the same communication channel and independently process it. The copying approach enhances security through diversity while keeping each individual replica simple, addressing the technical contradiction.
2Reliability
If multiple replicated data transmissions are performed, then security through uncertainty is improved, but communication overhead increases
Solution Approach 1:
The system employs periodic activation of replicas rather than continuous operation of all replicas. At each time step, only a subset of replicas is activated to transmit data, creating uncertainty for attackers while limiting the total communication overhead. This periodic action resolves the contradiction between security and communication burden.
Solution Approach 2:
Instead of activating all replicas continuously, the system uses partial action by activating only a subset of replicas at each time step. This approach provides sufficient security through uncertainty while avoiding the excessive communication overhead that would result from full replica activation, thus resolving the technical contradiction.
3Object-affected harmful factors
If random replica activation is implemented, then attacker reconnaissance is limited, but system complexity increases
Solution Approach 1:
The system implements dynamic activation of replicas based on random selection at each time step. This dynamic behavior prevents attackers from predicting which replicas will be active, limiting reconnaissance capability. The dynamic approach achieves security goals while maintaining relatively simple individual replica structures, resolving the contradiction.
4Reliability
If majority vote input mechanism is used, then FDI attack impact is reduced, but processing complexity increases
Solution Approach 1:
The majority vote mechanism implements a feedback loop where replica outputs are compared and the majority result is selected as the final output. This feedback approach effectively reduces FDI attack impact by rejecting minority (potentially attacked) outputs while maintaining relatively simple processing logic at each replica, resolving the technical contradiction.
Data Source
AI summary
A security system for enhancing security of a device utilizing a communication channel includes one or more processors and a storage including instructions stored thereon. When the instructions are executed by the one or more processors, the instructions cause the security system to receive, by a plurality of Internet of Thing (IoT) devices, data from a communication source through a first communication channel, replicate, by the plurality of IoT devices, the received data, randomly activate one of non-empty subsets of the plurality of IoT devices, select a majority vote input based on the replicated data from the randomly activated subset of the plurality of IoT devices; and transmit the majority vote input to a communication destination through a second communication channel, which is different from the first communication channel.