物联网环境下的敏感信息保护方法

随着物联网环境应用范围的扩大，用户隐私保护正成为一个重大的挑战，其中用户敏感信息的安全性是目前研究的难点。根据物联网环境下的主流网络制式，本文定义了敏感信息全局生命期的若干特征属性，在系统感知层对敏感信息进行特征识别，并设计相关规则标记敏感信息动态安全级别，度量特征属性与实时泄露场景的关联性，进而采用基于身份的加密方法（IBE）对敏感信息部署加密方案，最后在中间层及应用层部署补丁分发机制预防感知层的防护失效，从而实现敏感信息在全局生命期中面向泄露场景的安全防护模型。实验针对三种异构网络环境下敏感信息的泄露场景进行测试，证实了系统的安全性及有效性。

A protection for sensitive information in IOT environment

User Privacy protection has become major challenge and research difficulty with extended application of the Internet Of Things (IOT), especially the security of user sensitive information. In this paper, according to popular network structure in IOT, some characteristic attributes for sensitive information are defined in global data life time, which can be identified in sensor layer. In order to measure relevance between character attribute and leakage scene, we design relative rules to mark dynamic security level for sensitive information, and use Identity Based Encryption (IBE) to lay out encryption scheme. Finally dispatch distribution is performed in middleware and application layer to prevent expiration in sensor layer, consequently a leakage-oriented protection model for sensitive information is realized in global data life time. Experiments are accomplished for information leakage scenes in three heterogeneous networks, then the security and effectiveness of system are verified.