用於物聯網自動化平台之隱私強化技術

Privacy-Enhancing Technologies for Trigger-Action IoT Platforms

江昱熹(Yu-Hsi Chiang)

指導教授 ： 蕭旭君

國立臺灣大學/電機資訊學院/資訊工程學研究所/碩士(2019年)

https://doi.org/10.6342/NTU201903560

摘要

觸發式自動化平台是能讓使用者連接各式實體裝置及線上功能並撰寫自動化規則的雲端服務。這些平台的出現雖然使得家庭自動化變得更加容易，其中心化的設計卻也帶來了隱私疑慮。若這些平台被入侵或控制，攻擊者就能得到大量使用者的各式個人資料。在本論文中，我們研究了能用於這些自動化平台的隱私強化技術，並基於這些技術提出了兩個能保護隱私的自動化平台解決方案: OTAP以及ATAP，能同時保護使用者的個人資料又保有雲端平台的方便性。我們不僅提供了這兩個方案的安全性證明，亦透過實驗顯示在適當配置下，我們的解決方案能適用於各種不同的情境。

關鍵字

隱私強化技術 ； 物聯網 ； 觸發式程式設計 ； 家庭自動化 ； 使用者隱私 ； 雲端運算 ； 安全多方運算

並列摘要

Trigger-action platforms are cloud-based services that empower users to interconnect various physical devices and online services with custom automation. While bringing the convenience of home automation, their centralized design raised privacy concerns. If they are compromised, the attacker would be able to acquire a wide range of personal data of a large number of users. In this work, we study the technologies that can be used to enhance users' privacy against trigger-action platforms. Based on the technologies, we present two privacy-preserving trigger-action solutions: Obfuscated Trigger-Action Platform (OTAP) and Anonymous Trigger-Action Platform (ATAP) that can prevent users' private data being known by the platforms without compromising the conveniences. We show that the security of our schemes are provable and the empirical experiment results indicate that our solution can be deployed in various use cases when properly configured.

並列關鍵字

Privacy-Enhancing Technologies ； Internet-of-Things ； Trigger-Action Programming ； Home Automation ； User Privacy ； Cloud Computing ； Secure Multi-party Computation

參考文獻

[1] ApacheBench. https://httpd.apache.org/docs/2.4/programs/ab.html.

[2] Do more with Oticon - IFTTT. https://ifttt.com/oticon.

[3] Gartner Says 8.4 Billion Connected “Things” Will Be in Use in 2017, Up 31 Percent From 2016. https://www.gartner.com/en/newsroom/pressreleases/2017-02-07-gartner-says-8-billion-connectedthings-will-be-in-use-in-2017-up-31-percent-from-2016.

[4] IFTTT. https://ifttt.com.

[5] IFTTT Platform. https://platform.ifttt.com/lp/learn_more.