With the rapid development of the Internet of Things(IoT),social digitalization level continues to improve.Due to fragmentation of management,systems,and networks in variety of trades,IoT systems present chimney-like and bar-shaped characteristics,forming data islands,and it is difficult to meet the development needs of shared and intelligent IoT platforms in the future.Break data island through IoT data sharing,realize efficient and reliable IoT data exchange among terminals,services and systems is inevitable for the development of digital society.Different from the data sharing within the traditional single system,data sharing among multiple parties lacks trust foundation and participation motivation.How to realize trusted data sharing among multiple parties and improve the enthusiasm of all parties to participate in data sharing has become the key issue of IoT data sharing.Authentication mechanism and incentive mechanism,as the bases of security,credibility and active participation in data sharing process,have important research significance.However,IoT data sharing has lots of characteristics such as multiparty participation,decentralization and privacy sensitivity,current authentication mechanisms and incentive mechanisms are difficult to directly apply to IoT data sharing.For authentication,since IoT data sharing involves cooperation between multiple parties,traditional centralized mechanisms are difficult to provide credible authentication services among multi-party.Therefore,it is urgent to design a multi-center authentication mechanism to provide secure and credible support for IoT data sharing.As to incentive mechanism,since IoT data sharing is an emerging scenario,mechanism design for it still lacks specified market modeling and cost-benefit analysis.Therefore,it is urgent to carry out incentive mechanism research to promote IoT parties to participate in data sharing.In this background,the thesis aims at the problems existing in the authentication and incentive mechanism of IoT data sharing,builds a crossdomain authentication mechanism for IoT data terminals and an access control mechanism for IoT shared data in a multi-party scenario,realize the credibility of data sources and data access control among multiple IoT systems.And,the thesis proposes the IoT data collection incentive mechanism and data distribution incentive mechanism to enhance the enthusiasm of multiple subjects to participate in data sharing and accelerate the efficiency of data circulation.The main innovation of the thesis is as follows.(1)Aiming at the lack of multi-party credible authentication services in IoT data sharing scenario,the thesis proposes an alliance chain based cross-domain authentication mechanism for IoT data terminals authentication,which could provide a credible cornerstone for IoT data sharing among different domains.Combining edge computing technology,the thesis constructs a cross-domain authentication model consisting of three layers of cloud,edge,and equipment.Therefore,IoT identity information belonging to different domains can be trusted and communicated through the alliance chain,local infomation anonymization and authenticate effeciently can be realized through the edge gateway.In this way,data could be shared among different domains without local identification leakage.Besides,Elliptic Curve Crypto(ECC)algorithm is added to this design for further improvement on authentication efficiency.Theoretical analysis and simulation experiments show that proposed mechanism can achieve secure and reliable authentication,and reduce the communication and computational overhead of the cross-domain authentication process.(2)In IoT data sharing scenario,traditional centralized cloud access control mechanism has problems such as centralization risk and excessive computing burdens for IoT.To solve that,the thesis proposes a multi-center,outsourable access control mechanism to achieve lightweight sharing data access control,and improve the security of IoT data sharing.Combined with blockchain technology,a blockchain-based IoT data access control model is constructed,and an attribute-based multi-center encryption and decryption mechanism is designed to achieve multi-center access control policy support.Through the obfuscation of access control policy,both encryption and decryption operations could be outsourced to any server without trust requirements,computation burdens of IoT terminals are lightened.Theoretical analysis and simulation experiments show that the proposed mechanism can meet the security requirements of multi-party collaborative access control of IoT data sharing,and can significantly reduce the encryption and decryption overhead of the Internet of Things terminal during the data sharing process.(3)In IoT data sharing,tradition data collection incentive mechanisms are designed for only one demand,which cannot maximize benefits in markets existing multi demands.The thesis proposes a data collection incentive mechanism under multiple demand scenarios,which realizes data collection task scheduling and data pricing in distributed way,improves profit of data collection.First,a data collection market composed of multiple data demanders,multiple data collectors and trading platforms is constructed.By analyzing cost and benefit functions of all parties,utility model of the incentive mechanism is constructed,social welfare is designed as object function of this model.Faced with the wide distribution and privacy-sensitive characteristics of the Internet of Things users,traditional platform centralized scheduling is not suited anymore.So,the thesis decomposes the global optimization problem into the demander,collector,and platform’s respective local optimization problems,and solve them with distributed gradient descent algorithm,provide task scheduling and price adjustment mechanism support for data collection.Theoretical analysis and simulation experiments show that the proposed mechanism can achieve market equilibrium through a few iterations,and achieve the incentive goals of maximizing social welfare,maintaining supply,demand,and price stability.(4)Since it is hard for existing data distribution resources to afford massive instantaneous data requests in IoT scenario,a reverse auctionbased IoT data distribution incentive mechanism is designed,which could encourage resources at the edge of the network to provide idle bandwidth and cache,thus accelerate data distribution,and reduce network burden.First,the thesis takes the resource leasing process as a reverse auction model,analyzes utility functions of both the data service provider and the network access point.Taking access point’s network coverage capability,holding resources,quotation and other information into consideration,the thesis design a greedy algorithm to select access points which could earn more profits.On this basis,incentive mechanism is designed to maximize benefits of data service providers with ensuring incentive compatibility and individual rationality.Simulation experiments show that the proposed mechanism has better resource utilization and higher data distribution benefits than traditional greedy algorithms,and improves profits of data service providers. |