Design And Implementation Of Secure Publish/subscribe System For Internet Of Things

Benefiting from the development of wireless sensing technology,the Internet of Things has achieved rapid development in smart cities,smart healthcare and autonomous driving.One of the most notable features of the Internet of Things is distributed.This feature is consistent with the decoupling feature of the publish/subscribe system,so the publish/subscribe system is more suitable for IoT scenarios.However,due to the decoupling feature of the publish/subscribe system,attacks against the privacy of users in the system are endless.Therefore,the research on the security and privacy protection of the publish/subscribe system has attracted wide attention from scholars at home and abroad.The security threats faced by the publish/subscribe system can be divided into three categories:user privacy risk,content privacy risk and storage risk.In addition,the publish/subscribe system still has the problem of difficulty in revoking subscription rights.Aiming at the above problems,this thesis proposes an attribute-based encryption publish/subscribe model that can automatically revoke permissions based on the dual-strategy attribute-based encryption and time-limited key management scheme.Combining the blockchain and the proposed scheme,and taking advantage of the decentralization of the blockchain,this thesis completed the design and implementation of the blockchain based secure publish/subscribe system.The main innovations of the thesis are as follows:(1)This thesis proposes a publish/subscribe system that can automatically revoke permissions.The system can not only implement fine-grained user access control,but also automatically revoke the user's decryption authority.The experimental results show the feasibility and effectiveness of the scheme.The security analysis shows that the secure publish/subscribe system can guarantee the correctness of the secure access control of the subscription system.(2)Based on the above scheme,this thesis designs and implements a blockchain based publish/subscribe system with privacy protection function.The system mainly includes the functions of system member management and secure message publish/subscribe.We implement the front-end and back-end of the system.At the same time,we provide a user-friendly visual page to facilitate the interaction between users and the system.