EPPA: An Efficient and Privacy-Preserving Aggregation Scheme for Secure Smart Grid Communications Rongxing Lu, Xiaohui Liang, Xu Li, Xiaodong Lin, Xuemin (Sherman) Shen IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS VOL. 23, NO. 9, SEPTEMBER 2012 Presenter : 周新偉 Date:2014/10/27 1

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 2

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 3

Intorduction 4

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 5

System Model 6

Security Requirements Confidentiality Authentication and Data Integrity 7

Design Goal The secure requirement should be guaranteed in the proposed scheme The communication effectiveness should be achieved in the proposed scheme 8

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 9

Preliminaries 10

Preliminaries----- Paillier Cryptosystem(1/3) Key Generation security parameter κ 1 large prime p 1, q 1 | p 1 |=|q 1 |=|κ 1 | RSA modulus : n=p 1 * q 1 λ=lcm(p 1 -1, q 1 -1 ) L(u)=(u-1)/n μ=(L(g λ modn 2 )) -1 mod n Public key pk = (n,g) Privite key sk = (λ, μ) 11

Preliminaries----- Paillier Crypyosystem(2/3) 12

Preliminaries----- Paillier Crypyosystem(3/3) 13

Outline Introduction System Model, Security Requirement And Design Model Preliminaries EPPA Scheme Security Analysis Performance Conclusions 14

EPPA Scheme--- System Initialization(1/3) 15

EPPA Scheme--- System Initialization(2/3) 16

EPPA Scheme--- System Initialization(3/3) 17

EPPA Scheme--- User Report Generation 18

EPPA Scheme--- Privacy-Preserving Report Aggregation 19

EPPA Scheme--- Privacy-Preserving Report Aggregation After validity checking, the following steps for privacy-preserving report aggregation : 20

EPPA Scheme--- Secure Report Reading And Response(1/6) 21

EPPA Scheme--- Secure Report Reading And Response(2/6) Taking And the report C=g M R n mod n 2 is still ciphertext for Paillier Cryptosystem OA use master key to recover M 22

EPPA Scheme--- Secure Report Reading And Response(3/6) By invoking algorithm 1,OA can recover and store the aggregated data 23

EPPA Scheme--- Secure Report Reading And Response(4/6) Correctness of algorithm 1,assume X l =M Since any type of data is less than d, 24

EPPA Scheme--- Secure Report Reading And Response(5/6) 25

EPPA Scheme--- Secure Report Reading And Response(6/6) 26

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 27

Security Analysis(1/2) 28

Security Analysis(2/2) 29

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 30

Performance(1/3) 31

Performance(1/3) 32

Performance(2/3) 33

Performance(3/3) 34

Outline Intorduction Systrm Model,Security Requirement And Design Model Preliminaries EPPA Schmem Security Analysis Performance Conclusions 35

Conclusions In this paper, we have proposed an efficient and privacypreserving aggregation scheme for secure smart grid communications. It realizes a multidimensional data aggregation approach based on the homomorphic Paillier cryptosystem. Compared with the traditional one-dimensional data aggregation methods, EPPA can significantly reduce computational cost and significantly improve communication efficiency, satisfying the real-time high-frequency data collection requirements in smart grid communications. We have also provided security analysis to demonstrate its security strength and privacy- preserving ability, and performance analysis to show the efficiency improvement. For the future work, we will study the possible behavior by internal attackers and extend the EPPA scheme to effectively resist such attacks. 36

心得 37

38 Thanks for your listening