臺灣博碩士論文加值系統

隨著資訊科技的成熟再加上網際網路的發展越來越普及，使得物聯網的技術更備受重視。
在物聯網的應用上，多數感測元件是必須透過網路來傳達其所測得的數據，然而這些傳輸的資料包含了身處物聯網系統中的設備訊息、網路資訊以及數據內容，因此資料保護就顯得相當重要，本論文在保護傳輸協定與通道加密的實作來提升資料的安全性，在下面章節也提出了基於共用密鑰加密和非對稱密碼學(或稱之為公開密鑰加密)的混合密碼系統並加以解釋其加密過程與機制。藉由非對稱金鑰包含對稱金鑰，將金鑰加密交換，達到金鑰交換安全性。
同時本論文根據現今廣泛使用的網際網路應用方式，IoT設備之中所具有的網際網路通訊模組，其MAC Address(媒體存取控制位址)上傳給服務伺服器，如此服務伺服器才能再轉查資料庫伺服器取得公鑰；因此本論文利用前述機制以MAC Address當作公鑰的索引值並將對應的公鑰下載至服務伺服器，接著使用非對稱加密演算法，讓IoT設備和伺服器之間建立一個加密通道來交換共鑰，希望在降低物連網建置成本的同時也能兼顧資料與通道安全。
本論文貢獻基於IoT元件，利用IoT設備所具備之唯一的MAC位址，以及相關的資訊加密方法，使IoT感測器訊息可應用無線或有線數據傳輸的密碼系統，並可以藉以區別每個IoT元件。因此，(1)可以根據相對應的網際網路MAC位址和來自製造商的訊息區分相同類型的元件，還可以基於MAC地址獲取IoT元件相關訊息。(2)根據個別IoT元件的識別資訊，可以獨立地定義密碼系統的加密方法。換句話說，可以基於相同的密碼系統為不同的IoT元素分配不同的加密金鑰。可以增強數據傳輸的安全性。(3)IoT元件皆已安裝兩把獨有的非對稱金鑰與對稱金鑰，以雙層金鑰的基底下在網路上做傳輸，降低了網路竊聽的風險。(4)在個別IoT元件加入物聯網網路時，網路管理員不需做任何設定，IoT元件將會自動判別所在位置並且自動與網路中的服務伺服器溝通。因此，網路管理員或系統用戶只需要決定IoT元件的有效網際網路存取範圍。可以減少管理IoT元件和維護密碼系統的工作量和成本。

With the maturity of information technology and the growing popularity of the Internet, the technology of the Internet of Things becomes the important research issue.
In the application of the Internet of Things (IoT), most sensing components must transmit their measured data through the Internet. However, these transmitted data may include some secure information such as device information, network information, and data content of the IoT system. Therefore, data protection and security of IoT is a very important issue. In this thesis, data transmission based on the existed network protocol with the security and the verification of the security system are considered. A hybrid cryptosystem based on shared key encryption and asymmetric cryptography (or public key cryptography) is presented in this thesis. The corresponding implementation steps and processed are also introduced.
According to the existed network procedure today, the network communication module of the IoT device in this thesis uploads the media access control address (MAC address) to the local service server. Then, the local service server can query and obtain the corresponding public key from the remote database server. Therefore, the asymmetric encryption algorithm can be established for exchanging data between IoT devices and the local service server.
The contribution of this thesis are those: (1) the same type of component can be differentiated and identified according to the corresponding MAC address and the information recorded in the manufacturer. In other words, the IoT component related information can also be obtained based on its MAC address. (2) Based on the proposed encryption method in this thesis, different encryption keys can be individually assigned to different IoT components. Therefore, each IoT device can equip its own encryption key. (3) The IOT components are on demand given two unique keys: asymmetric key and symmetric key. According to the proposed encryption method, the transmitted data can be secured by the symmetric key which is exchanged and secured by the asymmetric key. The data transmission can be more secured. (4) When a new IoT component is connected to the local network, the manual operation of network administrator is not needed. In this thesis, the network configuration and security key exchanging can be done automatically.. The research is published in IEEE ICACT

中文摘要…………………………………………………………………i
英文摘要……………………………………………………………iii
誌謝……………………………………………………………………………v
目錄…………………………………………………………………………vi
表目錄…………………………………………………………………vii
圖目錄………………………………………………………………viii
第一章緒論……………………………………………………………1
第二章文獻探討……………………………………………………3
2.1 物聯網(IoT)元件之識別………………………3
2.2 資料傳輸安全………………………………………………5
2.3 網際網路的MAC位址…………………………………7
2.4 網路架構-自動化………………………………………7
第三章研究內容與方法………………………………………8
3.1 自動化連線…………………………………………………11
3.2 自動辨別程序……………………………………………12
3.3 物聯網密碼系統………………………………………13
3.4 物聯網的網路安全…………………………………14
3.5 實作架構的運作流程……………………………14
第四章實驗部分…………………………………………………16
第五章結論…………………………………………………………24
參考文獻………………………………………………………………25
Extended Abstract……………………………………27

[1] A. S. Ali, Z. Zanzinger, D. Debose, B. Stephens, “Open Source Building Science Sensors (OSBSS): A low-cost Arduino-based platform for long-term indoor environmental data collection,”Building and Environment. Vol. 100: 114–126. 2016
[2] M.-S. Jian, Y.-C. Wang, B.-H. Wu, Y.-E. Cheng, “Hybrid Cloud Computing for User Location-aware Augmented Reality Construction,” ICACT, pp.190-194, Feb. 2018.
[3] L.Xu, W.He, S.Li, “Internet of things in industries: a survey.”IEEE Trans. Ind. Inf., Vol. 10(4), pp. 2233–2243, 2014,DOI: 10.1109/TII.2014.2300753
[4] C. B. Westphall, C.MerkleWestphall, J. Werner, D. dos Santos, “Security in the Context of Internet of Things, Cloud, Fog, and Edge,”IWCSS, Dec. 2017. DOI:10.13140/RG.2.2.20008.67841
[5] B.Echandouri, C.Hanin, F.Omary, S.Elbernoussi, “LCAHASH-MAC: A new lightweight message authentication code using cellular automata for RFID,”WINCOM, pp.1-6, Nov. 2017
[6] Y.Seralathan, T. Oh, S.Jadhav, J. Myers, J.Jeong, Y. H. Kim, and J. Kim, “IoT Security Vulnerability: A Case Study of a Web Camera,”ICACT, pp.172-177, Feb. 2018.
[7] M.S. Jian, J.Y. Wu, J.Y.n Chen, Y.J. Li, Y.C. Wang, H.-Y. Xu, “IoT base Smart Home Appliances by using Cloud Intelligent Tetris Switch,” ICACT, pp.589-592, Feb. 2017.
[8] A. S. Ali, Z. Zanzinger, D. Debose, B. Stephens, “Open Source Building Science Sensors (OSBSS): A low-cost Arduino-based platform for long-term indoor environmental data collection,”Building and Environment. Vol. 100: 114–126. 2016
[9] Z.Yan, P. Zhang,A.V. Vasilakos, “A survey on trust management for internet of things.”J. Netw. Comput. Appl., Vol. 42, pp. 120–134, 2014,DOI: 10.1016/j.jnca.2014.01.014.
[10] T.Heer, O.Garcia-Morchon, R.Hummen, S.L.Keoh, S.S.Kumar, K.Wehrle, “Security challenges in the IP-based internet of things.”J. Wirel. Pers. Communic., Vol. 61(3), pp. 527–542, 2011, DOI: 10.1007/s11277-011-0385-5.
[11] B. Kamal, et al. “Software‐defined networking (SDN): a survey,”Security and Communication Networks, vol. 9 no. 18, pp. 5803-5833, Dec. 2016.
[12] EPCGlobalwebsite.[Online].Available:https://www.gs1.org/epcglobal
[13] M.S. Jian, H.C. Chang, J.Y. Wu, and J.Y. Chen, “Intelligent Power Switch,” R.O.C. Patent M528511, Sept. 11, 2016.
[14] J. Black, M. Cochran, T. Highland: A Study of the MD5 Attacks: Insights and Improvements, 3 March 2006. Retrieved 27 July 2008.
[15] ReemAlfaifi, “Probabilistic cryptosystem with two pairs of private/public keys,”ICECTA, pp.1-4, Nov. 2017.
[16] DhimanSaha; DebdeepMukhopadhyay; DipanwitaRoyChowdhury. "A Diagonal Fault Attack on the Advanced Encryption Standard" (PDF). Archived (PDF) from the original on 22 December 2009. Retrieved 2009-12-08.
[17] ChristofPaar, Jan Pelzl, "The Data Encryption Standard (DES) and Alternatives"[permanent dead link], free online lectures on Chapter 3 of "Understanding Cryptography, A Textbook for Students and Practitioners". Springer, 2009.
[18] Delfs, Hans &Knebl, Helmut. Symmetric-key encryption. “Introduction to cryptography: principles and applications”. Springer. 2007. ISBN 9783540492436.
[19] EPCGlobalwebsite.[Online].Available:https://www.gs1tw.org/twct/web/downloads/EPCglobal_Framework_v1.5.pdf
[20] 各類加密表示圖:https://www.itread01.com/content/1544153222.html
[21] MAC位址:https://zh.wikipedia.org/wiki/MAC%E5%9C%B0%E5%9D%80
[22] DHCP:https://zh.wikipedia.org/wiki/%E5%8A%A8%E6%80%81%E4%B8%BB%E6%9C%BA%E8%AE%BE%E7%BD%AE%E5%8D%8F%E8%AE%AE
[23] EPC資料交換:http://epaper.gotop.com.tw/pdf/AEN002900.pdf
[24] 自動化連線:https://zh.wikipedia.org/wiki/Nmap
[25] Calderbank, Michael. The RSA Cryptosystem: History, Algorithm, Primes (PDF). 2007-08-20.
[26] Ming-Shen Jian, Yu-En Cheng, Chen-Han Shen."InternetOf Things (IOT) Cybersecurity based on the Hybrid Cryptosystem", 2019 21st International Conference on Advanced Communication Technology (ICACT), 2019