“人工智能+”背景下的数据安全与隐私保护探析

随着大数据和云计算的技术的深入应用，人工智能时代的机器学习和深度学习更需要日益增长的数据，因此数据安全与隐私保护变得更加迫切。本文介绍人工智能的定义以及特征，探究数据安全和隐私保护现状，分析数据安全和隐私保护面临的诸多问题，并提出在人工智能时代对数据安全和隐私保护的措施。     

On Cost Aware Cloudlet Placement for Mobile Edge Computing

As accessing computing resources from the remote cloud inherently incurs high end-to-end (E2E) delay for mobile users, cloudlets, which are deployed at the edge of a network, can potentially mitigate this problem. Although some research works focus on allocating workloads among cloudlets, the cloudlet placement aiming to minimize the deployment cost (i.e., consisting of both the cloudlet cost and average E2E delay cost) has not been addressed effectively so far. The locations and number of cloudlets have a crucial impact on both the cloudlet cost in the network and average E2E delay of users. Therefore, in this paper, we propose the Cost Aware cloudlet PlAcement in moBiLe Edge computing (CAPABLE) strategy, where both the cloudlet cost and average E2E delay are considered in the cloudlet placement. To solve this problem, a Lagrangian heuristic algorithm is developed to achieve the suboptimal solution. After cloudlets are placed in the network, we also design a workload allocation scheme to minimize the E2E delay between users and their cloudlets by considering the user mobility. The performance of CAPABLE has been validated by extensive simulations.      

基于光纤-无线网络的协同计算卸载算法

随着无源光网络的发展,光纤-无线网络能同时支持集中式云和边缘云计算技术,成为一种具有发展前景的网络结构。但是,现有的基于光纤-无线网络的任务协同计算卸载研究主要以最小化移动设备的能耗为目标,忽略了实时性高的任务的需求。针对实时性高的任务,提出了以最小化任务的总处理时间为目标的集中式云和边缘云协同计算卸载问题,并对其进行形式化描述。同时,通过将该问题归约为装箱问题,从而证明其为NP难解问题。提出一个启发式协同计算卸载算法,该算法通过比较不同卸载策略的任务处理时间,优先选择时间最短的任务卸载策略。同时,提出一个定制的遗传算法,获得一个更优的任务卸载策略。实验结果表明,与现有的算法相比,本文提出的启发式算法得到的任务卸载策略平均减少4.34%的任务总处理时间,而定制的遗传算法的卸载策略平均减少18.41%的任务总处理时间。同时,定制的遗传算法的卸载策略与本文提出的启发式算法相比平均减少14.49%的任务总处理时间。     

基于紧耦合结构的宽带基站天线设计

随着5G移动通信频段的公布,传统基站天线已不足以覆盖其工作频段。文章以紧耦合阵列天线理论为基础,提出了一种基于紧耦合结构的交叉偶极子宽带基站天线。该天线由两对正交的领结状偶极子天线构成,通过两对交叉偶极子之间的耦合效应,有效地展宽了天线的阻抗带宽。同时,通过在天线和金属反射板之间加载电阻型频率选择表面,吸收由反射板引入的谐振反射波,改善天线高频端辐射性能。仿真及测试结果表明:该天线在1.7-3.6 GHz 频率范围内,可以满足基站天线的设计指标,两端口驻波比均小于1.5,两端口之间隔离度大于55 dB,半功率波束宽度满足65°±5°范围,且整个频段内增益均大于8.5 dBi。     

个性化三维虚拟试衣系统研究

为满足用户对虚拟试衣的个性化需求和提高虚拟试衣体验，提出一种包括自动化蒙皮、基于单张图片人脸三维自动重建、人体参数化变形以及服装模型穿透处理等模块的个性化虚拟试衣系统。设计了自动化蒙皮算法，解决已有虚拟试衣服装模型制作成本高的问题；通过基于单张图片的三维人脸自动重建和人体参数化变形，满足消费者个性化需求;运用基于自动透明贴图计算的服装穿透处理方法，改进系统试衣效果。实验表明，所提出的系统能够以较低的构建与运行成本实现较好的试衣效果，提供良好的个性化虚拟试衣体验。     

Multimodal sensing and active continuous closed‐loop feedback for achieving reliable manipulation in the outdoor physical world

The use of field robots can greatly decrease the amount of time, effort, and associated risk compared to if human workers were to carryout certain tasks such as disaster response. However, transportability and reliability remain two main issues for most current robot systems. To address the issue of transportability, we have developed a lightweight modularizable platform named AeroArm. To address the issue of reliability, we utilize a multimodal sensing approach, combining the use of multiple sensors and sensor types, and the use of different detection algorithms, as well as active continuous closed‐loop feedback to accurately estimate the state of the robot with respect to the environment. We used Challenge 2 of the 2017 Mohammed Bin Zayed International Robotics Competition as an example outdoor manipulation task, demonstrating the capabilities of our robot system and approach in achieving reliable performance in the fields, and ranked fifth place internationally in the competition.     

基于密钥共享的分层混合认证模型

随着信息时代的迅速发展,云计算数据访问安全已经成为了用户最关心的问题。身份认证技术是确保参与者在开放的网络环境中实现安全通信的一种重要手段,如何利用身份认证技术为云环境安全保驾护航,成为学者研究的热点。文中通过公钥基础设施(Public Key Infrastructure,PKI)颁发CA证书以在不同云服务间建立信任,将多个采用身份密码体制(Identity-Based Encryption,IBE)的云联合起来；采用分层身份加密体系,引入共享密钥技术,通过选取成环结构,提出一种PKI-IBE混合认证模型方案,并对方案的安全性进行分析,从理论上证明了云环境下PKI-IBE(Public Key Infrastructure-Identity-Based Encryption)同层成环模型提供服务的可行性。同时文中设计了一种基于该模型的签密技术,通过公私密钥对实现云内认证以及跨云认证。安全性理论证明与性能分析表明,该方案在计算量稍增加的前提下,保证了足够的安全性,更加满足云环境下的用户分属不同云域的认证以及用户安全访问的需求,有效解决了云环境中数据访问的安全问题。     

Secure lightweight password authenticated key exchange for heterogeneous wireless sensor networks

Several three-party password authenticated key exchange (3-PAKE) protocols have recently been proposed for heterogeneous wireless sensor networks (HWSN). These are efficient and designed to address security concerns in ad-hoc sensor network applications for a global Internet of Things framework, where a user may request access to sensitive information collected by resource-constrained sensors in clusters managed by gateway nodes. In this paper we first analyze three recently proposed 3-PAKE protocols and discuss their vulnerabilities. Then, based on Radio Frequency Identification technologies we propose a novel 3-PAKE protocol for HWSN applications, with two extensions for additional security features, that is provably secure, efficient and flexible.     

基于序列模型的无线传感网入侵检测系统

随着物联网(IoT)的快速发展，越来越多的IoT节点设备被部署，但伴随而来的安全问题也不可忽视。IoT的网络层节点设备主要通过无线传感网进行通信，其相较于互联网更开放也更容易受到拒绝服务等网络攻击。针对无线传感网面临的网络层安全问题，提出了一种基于序列模型的网络入侵检测系统，对网络层入侵进行检测和报警，具有较高的识别率以及较低的误报率。另外，针对无线传感网节点设备面临的节点主机设备的安全问题，在考虑节点开销的基础上，提出了一种基于简单序列模型的主机入侵检测系统。实验结果表明，针对无线传感网的网络层以及主机层的两个入侵检测系统的准确率都达到了99%以上，误报率在1%左右，达到了工业需求，这两个系统可以全面有效地保护无线传感网安全。     

生产信息管理系统关键技术研究

根据公司生产控制系统现状和发展需要,分析和探讨建立公司生产信息管理系统(PIMS)的软硬件基本构成和主要方法,并对以隔离网关、实时数据库、能源计量管理等为基础的生产信息管理系统关键技术进行研究和测试。