Yue, Wenjin (Beijing Jiaotong University), Ma, Lianchuan (Beijing Jiaotong University), Li, Kaicheng (Beijing Jiaotong University), TANG, Tao (Beijing Jiaotong University)

Challenge-Response Protocol Based on Secret Sharing in Cloud Safety Computing Platform

Scheduled for presentation during the Regular Session "Communications and Protocols in ITS" (WeAT11), Wednesday, September 25, 2024, 10:50−11:10, Salon 19/20

2024 IEEE 27th International Conference on Intelligent Transportation Systems (ITSC), September 24- 27, 2024, Edmonton, Canada

This information is tentative and subject to change. Compiled on October 8, 2024

Abstract

With the integration of cloud computing into rail transit signal systems, the significance of cloud-based security and related functional safety concerns are garnering increased attention. Traditional safety computing platforms often grapple with potential failures due to Commercial Off-The-Shelf (COTS) hardware and software, along with vulnerabilities to single points of failure. Additionally, the inherent openness and complexity of cloud environments introduce novel safety challenges. This paper introduces a private cloud safety computing platform architecture predicated on a layered approach, coupled with a secret-sharing-based challenge-response protocol. This architecture involves partitioning virtual machines into distinct levels within the cloud to execute specific monitoring tasks. An identity authentication protocol is also implemented within these virtual machines to oversee their operation and thwart potential threats from dishonest virtual machines. Data analysis concerning the protocol's resistance to attacks and its computational efficacy indicates that it can detect security incidents with over 99% accuracy, markedly improving system reliability over conventional encryption methods. Furthermore, it delivers prompt response times, sustaining stable performance even under high loads.