IoT

摘要： To achieve the high availability of health data in erasure-coded cloud storage systems,the data update performance in erasure coding should be continuously optimized.However,the data update performance is often bottlenecked by the constrained cross-rack bandwidth.Various techniques have been proposed in the literature to improve network bandwidth efficiency,including delta transmission,relay,and batch update.These techniques were largely proposed individually previously,and in this work,we seek to use them jointly.To mitigate the cross-rack update traffic,we propose DXR-DU which builds on four valuable techniques:(i)delta transmission,(ii)XOR-based data update,(iii)relay,and(iv)batch update.Meanwhile,we offer two selective update approaches:1)data-deltabased update,and 2)parity-delta-based update.The proposed DXR-DU is evaluated via trace-driven local testbed experiments.Comprehensive experiments show that DXR-DU can significantly improve data update throughput while mitigating the cross-rack update traffic.

摘要： The low-intensity attack flows used by Crossfire attacks are hard to distinguish from legitimate flows.Traditional methods to identify the malicious flows in Crossfire attacks are rerouting,which is based on statistics.In these existing mechanisms,the identification of malicious flows depends on the IP address.However,the IP address is easy to be changed by attacks.Comparedwith the IP address,the certificate ismore challenging to be tampered with or forged.Moreover,the traffic trend in the network is towards encryption.The certificates are popularly utilized by IoT devices for authentication in encryption protocols.DTLShps proposed a new way to verify certificates for resource-constrained IoT devices by using the SDN controller.Based on DTLShps,the SDN controller can collect statistics on certificates.In this paper,we proposeCertrust,a framework based on the trust of certificates,tomitigate the Crossfire attack by using SDN for IoT.Our goal is threefold.First,the trust model is built based on the Bayesian trust system with the statistics on the participation of certificates in each Crossfire attack.Moreover,the forgetting curve is utilized instead of the traditional decay method in the Bayesian trust system for achieving a moderate decay rate.Second,for detecting the Crossfire attack accurately,a method based on graph connectivity is proposed.Third,several trust-based routing principles are proposed tomitigate the Crossfire attack.These principles can also encourage users to use certificates in communication.The performance evaluation shows that Certrust is more effective in mitigating the Crossfire attack than the traditional rerouting schemes.Moreover,our trust model has a more appropriate decay rate than the traditional methods.

摘要： The development of the Internet of Things has facilitated the rapid development of various industries.With the improvement in people’s living standards,people’s health requirements are steadily improving.However,owing to the scarcity of medical and health care resources in some areas,the demand for remote surgery has gradually increased.In this paper,we investigate remote surgery in the healthcare environment.Surgeons can operate robotic arms to perform remote surgery for patients,which substantially facilitates successful surgeries and saves lives.Recently,Kamil et al.proposed a secure protocol for surgery in the healthcare environment.However,after cryptanalyzing their protocol,we deduced that their protocols are vulnerable to temporary value disclosure and insider attacks.Therefore,we design an improved authentication and key agreement protocol for remote surgeries in the healthcare environment.Accordingly,we adopt the real or random(ROR)model and an automatic verification tool Proverif to verify the security of our protocol.Via security analysis and performance comparison,it is confirmed that our protocol is a relatively secure protocol.

摘要： Healthcare systems nowadays depend on IoT sensors for sending data over the internet as a common practice.Encryption ofmedical images is very important to secure patient information.Encrypting these images consumes a lot of time onedge computing;therefore,theuse of anauto-encoder for compressionbefore encodingwill solve such a problem.In this paper,we use an auto-encoder to compress amedical image before encryption,and an encryption output(vector)is sent out over the network.On the other hand,a decoder was used to reproduce the original image back after the vector was received and decrypted.Two convolutional neural networks were conducted to evaluate our proposed approach:The first one is the auto-encoder,which is utilized to compress and encrypt the images,and the other assesses the classification accuracy of the image after decryption and decoding.Different hyperparameters of the encoder were tested,followed by the classification of the image to verify that no critical information was lost,to test the encryption and encoding resolution.In this approach,sixteen hyperparameter permutations are utilized,but this research discusses three main cases in detail.The first case shows that the combination of Mean Square Logarithmic Error(MSLE),ADAgrad,two layers for the auto-encoder,and ReLU had the best auto-encoder results with a Mean Absolute Error(MAE)=0.221 after 50 epochs and 75%classification with the best result for the classification algorithm.The second case shows the reflection of auto-encoder results on the classification results which is a combination ofMean Square Error(MSE),RMSprop,three layers for the auto-encoder,and ReLU,which had the best classification accuracy of 65%,the auto-encoder gives MAE=0.31 after 50 epochs.The third case is the worst,which is the combination of the hinge,RMSprop,three layers for the auto-encoder,and ReLU,providing accuracy of 20%and MAE=0.485.

摘要： The misreading problem of a passive ultra-high-frequency(UHF)radio frequency identification(RFID)tag is a frequent problem arising in the field of librarianship.Unfortunately,existing solutions are something inefficient,e.g.,extra resource requirement,inaccuracy,and empiricism.To this end,under comprehensive analysis on the passive UHF RFID application in the librarianship scenario,a novel and judicious approach based on RFID localization is proposed to address such a misreading problem.Extensive simulation results show that the proposed approach can outperform the existing ones and can be an attractive candidate in practice.

摘要： Nowadays,the widespread application of 5G has promoted rapid development in different areas,particularly in the Internet of Things(IoT),where 5G provides the advantages of higher data transfer rate,lower latency,and widespread connections.Wireless sensor networks(WSNs),which comprise various sensors,are crucial components of IoT.The main functions of WSN include providing users with real-time monitoring information,deploying regional information collection,and synchronizing with the Internet.Security in WSNs is becoming increasingly essential because of the across-the-board nature of wireless technology in many fields.Recently,Yu et al.proposed a user authentication protocol forWSN.However,their design is vulnerable to sensor capture and temporary information disclosure attacks.Thus,in this study,an improved protocol called PSAP-WSNis proposed.The security of PSAP-WSN is demonstrated by employing the ROR model,BAN logic,and ProVerif tool for the analysis.The experimental evaluation shows that our design is more efficient and suitable forWSN environments.

摘要： When Internet of Things(IoT)nodes access the network through wireless channels,the network is vulnerable to spoofing attacks and the Sybil attack.However,the connection of massive devices in IoT makes it difficult to manage and distribute keys,thus limiting the application of traditional high-level authentication schemes.Compared with the high-level authentication scheme,the physical layer authentication scheme realizes the lightweight authentication of users by comparing the wireless channel characteristics of adjacent packets.However,traditional physical layer authentication schemes still adopt the one-to-one authentication method,which will consume numerous network resources in the face of large-scale IoT node access authentication.In order to realize the secure access authentication of IoT nodes and regional intrusion detection with low resource consumption,we propose a physical layer authentication mechanism based on convolution neural network(CNN),which uses the deep characteristics of channel state information(CSI)to identify sending nodes in different locations.Specifically,we obtain the instantaneous CSI data of IoT sending nodes at different locations in the pre-set area,and then feed them into CNN for training to procure a model for IoT node authentication.With its powerful ability of data analysis and feature extraction,CNN can extract deep Spatio-temporal environment features of CSI data and bind them with node identities.Accordingly,an authentication mechanism which can distinguish the identity types of IoT nodes located in different positions is established to authenticate the identity of unknown nodes when they break into the pre-set area.Experimental results show that this authentication mechanism can still achieve 94.7%authentication accuracy in the case of a low signalto-noise ratio(SNR)of 0 dB,which means a significant improvement in authentication accuracy and robustness.

摘要： 海上风电场工程庞大复杂,该文针对重大工程数字资产建设和管理的需要及工程特点,运用BIM、IoT、大数据等技术,设计开发了海上风电工程资产数字化平台,运用于工程全生命周期的规划、设计、施工、运维等各个阶段,为海上风电工程数字化技术资产的创建、存储、利用提供了有力的工具,为海上风电大规模、低成本开发和快速可持续发展提供了技术支撑。

摘要： The standard specification of IEEE 802.15.4 is called ZigBee Propocol. ZigBee protocol required security, low data transfer rate, power efficient network. In addition, the ZigBee mobility function makes the ZigBee network more interactive and multi-purpose. The ZigBee mobile node has a significant effect on network parameters, namely MAC delay, end-to-end delay, MAC throughput and network load. However, a particular significant ZigBee node affects network data traffic and reduces the strength of the Quality of Service (QoS). The key issues are to analyze the QoS in order to increase overall performance of the network. The study proposes a ZigBee network with the mobile node and fixed node based on a variety of MAC layer settings. The Riverbed Network Simulator (Academic Modeler Release 17.5) is used for configuring and simulating the ZigBee network in a variety of conditions. The simulation results show that ZigBee with a fixed node performs better than the ZigBee mobile node. The ZigBee network with fixed node produces a lower network load and a high ratio of successfully transmitted data. The analysis of this study allows the ZigBee network to be better designed.

摘要： 文章面向城市地下空间(人防工程)运营维护实际需求,应用BIM、IoT、智能感知等信息技术,搭建智能感知系统和基于BIM+IoT的地下工程智能运维平台,实现地下空间的信息化、精细化、智能化管理,为智慧地下空间提供有效的解决途径。

摘要： 本申请公开一种IoT设备的支付方法、IoT设备、IoT服务端及智能终端，所述支付方法包括：物联网IoT服务端接收交易服务端发送的数据对象，并根据交易服务端发送的用户登录交易服务端的账号信息确定IoT设备的设备ID；IoT设备接收该IoT服务端根据该设备ID发送的数据对象；所述IoT设备在接收到针对该数据对象的获取请求后，检测用于输入身份验证信息的输入设备；在所述IoT设备检测到所述输入设备后，获取所述输入设备上输入的验证信息；在所述验证信息被验证通过后，将所述数据对象发送至所述IoT服务端；所述IoT服务端通过用户登录支付服务端的账号信息，向所述支付服务端发起支付请求以进行支付。

摘要： 提供了一种电子装置和方法。异构物联网(IoT)系统的端到端自动互连利用在IoT设备和服务中可用的具有视觉和/或无线电标签信息的IoT服务信息使云到云(C2C)(主要IoT服务到外部IoT服务)和设备到云(D2C)(IoT设备到IoT服务)配对过程二者自动化。

摘要： 本发明涉及一种用于使用物联网仿真环境对物联网系统的行为和/或性能进行仿真的方法，该被仿真的物联网系统包括通信网络中的至少多个被仿真的物联网通信设备，该通信网络在预定地理区域中提供无线电覆盖，并且借助于分别在物联网通信设备和通信网络之间的物联网有效载荷数据的传输，物联网系统提供被仿真的物联网服务，该方法包括以下步骤：‑‑在第一步骤中，对于多种不同类型的物联网通信设备中的至少一种特定类型的物联网通信设备，确定和/或仿真该特定类型的物联网通信设备的行为，并将相应的性能数据存储在物联网仿真环境的数据库中，‑‑在第一步骤之后的第二步骤中，借助于从该多种不同类型的物联网通信设备中选择至少一种特定类型的物联网通信设备，以及借助于选择多个不同网络接入可能性中的至少一种特定类型的网络接入可能性和多个不同通信概况中的至少一种特定类型的通信概况两者来选择或确定被仿真的物联网系统，‑‑在第二步骤之后或至少部分在第二步骤期间的第三步骤中，并且关于在第二步骤中选择或确定的物联网系统，通过物联网仿真环境，使用物联网仿真环境的数据库或指派给物联网仿真环境的数据库中所存储的性能数据来仿真行为和/或性能的至少一部分。

摘要： 本申请公开一种IoT设备的支付方法、IoT设备、IoT服务端及智能终端，所述支付方法包括：物联网IoT服务端接收交易服务端发送的数据对象，并根据交易服务端发送的用户登录交易服务端的账号信息确定IoT设备的设备ID；IoT设备接收该IoT服务端根据该设备ID发送的数据对象；所述IoT设备在接收到针对该数据对象的获取请求后，检测用于输入身份验证信息的输入设备；在所述IoT设备检测到所述输入设备后，获取所述输入设备上输入的验证信息；在所述验证信息被验证通过后，将所述数据对象发送至所述IoT服务端；所述IoT服务端通过用户登录支付服务端的账号信息，向所述支付服务端发起支付请求以进行支付。

摘要： 本发明涉及一种NB‑IoT水表日冻结数据上报方法及NB‑IoT水表。该方法包括下述步骤：获取并保存每天的日冻结数据，记录冻结数据天数；若冻结数据天数达到预设天数，则将所有日冻结数据上传至服务器，其中预设天数为至少两天。本发明将日冻结数据暂时存储在水表上，达到预设天数后才将日冻结数据发送至服务器，减少NB‑IoT通信模块的使用次数，从而减少电池电量消耗，降低管理维护成本。

摘要： 本发明实施例提供了一种IOT设备远程唤醒方法、终端设备及IOT设备，所述方法包括：获得IOT设备的身份数据及密钥；生成唤醒指令；基于所述密钥加密所述唤醒指令，形成唤醒指令密文；在所述IOT设备处于低功耗状态时，通过与所述IOT设备建立网络连接的服务器向所述IOT设备发送所述唤醒指令密文，使所述IOT设备基于所述唤醒指令密文确定是否执行唤醒操作。本发明的IOT设备远程唤醒方法能够通过服务器而安全唤醒IOT设备，有效防止非法用户恶意远程唤醒IOT设备。

摘要： 本发明提供了一种决定IOT业务的方法，包括：第一节点从第二节点获取IOT能力信息和/或IOT倾向信息；第一节点根据所获取的IOT能力信息和/或IOT倾向信息，决定UE的IOT行为。本申请还公开了对应的决定IOT业务的设备。本申请还公开了一种IOT业务行为控制方法和设备、以及一种选择核心网节点的方法和设备。应用本申请能够有效减少信令资源的开销，提高资源的利用率。

摘要： 本申请实施例提供了一种IoT设备升级方法、IoT设备和计算机可读存储介质，涉及物联网技术领域。IoT设备升级方法包括：在IoT设备的版本需要升级的情况下，检测IoT设备的剩余内存；若剩余内存小于预设阈值，则释放内存的存储空间，并建立与OTA云服务器之间的安全连接；基于安全连接，对IoT设备进行升级。本申请实施例提供的方法能够提高IoT设备升级通信的安全性。

摘要： 本申请提供了一种入网方法、NB‑IoT芯片、NB‑IoT终端以及计算机存储介质，入网方法应用于NB‑IoT芯片，NB‑IoT芯片经过扫频操作得到i个频点，i≥1，入网方法包括：根据i个频点中第j个频点下服务小区的信号特征数据，对从第j个频点下搜索到的服务小区进行筛选得到候选接入小区，1≤j≤i，信号特征数据包括RSRP和SINR中至少其一；NB‑IoT芯片解调第j个频点下的候选接入小区的系统消息以及RRC消息；若NB‑IoT芯片成功解调第j个频点下的至少一候选接入小区的系统消息以及RRC消息，则NB‑IoT芯片接入到第j个频点下系统消息被成功解调的一候选接入小区，从而保证了入网流程的成功率，同时，降低了入网时延，节省了NB‑IoT芯片或者NB‑IoT终端的功耗。

摘要： 本申请涉及一种IoT设备设置方法及IoT设备。该IoT设备与IoT服务器通信；IoT设备包括：处理器，发射距离大于预设的发射距离的第一天线，发射距离小于预设的发射距离的第二天线，存储器上的计算机程序。当计算机程序被处理器执行时，使得IoT设备执行：通过第一天线广播第一消息；接收到第一响应消息；响应于第一响应消息，通过第二天线发送第二消息；接收到告知消息。本申请能够方便快速地完成IoT设备间的设置，简化操作，节省时间，方便用户，提升用户体验，提高安全性。