上周花了几天时间,对近五年的研究工作做了一些总结。我一个人,带着几个学生,艰难中求生存。
具有隐私保护性的数据聚合
安全电子投票协议,主要实现两个看似矛盾的目标,一方面是投票者可以验证自己的参与是否被正确的计票,另一方面投票者不可以把自己的验证向他人证明。我们设计了不需要可信第三方的安全电子投票协议,于2011年发表在Inscrypt’2011,扩展版于2016年11月发表在Journal of Information Science and Engineering(中国密码学会推荐期刊)。该项研究成果于2017年被R. Rivest教授(2002年图灵奖获得者、MIT教授)收入其专著《Software Independence Revisited》,于2016年被Peter Y.A. Ryan(卢森堡大学信息安全中心负责人,安全工程领域著名专家)收入专著《Real-world electronic voting: Design, Analysis and Deployment》,并且指出“Liu et al. note that reliance on a random number generator is a potential security vulnerability and devise an alternative solution”.
主要论文详细信息为:
1. Yining Liu, Peiyong Sun, Jihong Yan, et al. An Improved Electronic Voting Scheme without a Trusted Random Number Generator, Inscrypt’2011, LNCS 7537, pp. 93-101. (中国计算机学会、中国密码学会推荐C类会议)
2. Yining Liu, Wei Guo, Chi Cheng, et al. A Robust Electronic Voting Scheme against Side Channel Attack. Journal of Information Science and Engineering, vol. 32, no. 6, pp. 1471-1486, 2016. (中国密码学会推荐期刊)
3. Yining Liu, Quanyu Zhao. E-Voting Scheme Using Secret Sharing and K-Anonymity. World Wide Web: Internet and Web Information Systems. DOI:10.1007/s11280-018-0575-0, 2018. IF=1.473, (中国计算机学会推荐B类期刊)
在很多情况下,不需要得到数据聚合的精确值,具有概率意义的聚合虽然有误差,但可以极大提高协议的实用性,我们用差分隐私为工具,设计了不需要可信第三方的数据聚合协议,主要论文包括:
1. Yining Liu, Wei Guo, Chun-I Fan, Liang Chang, Chi Cheng. A Practical Privacy-Preserving Data Aggregation (3PDA) Scheme for Smart Grid, IEEE Transactions on Industrial Informatics, DOI: 10.1109/TII.2018.2809672, 2018. 一区
2. Yining Liu, Gao Liu, Chi Cheng, Zhe Xia, Jian Shen. A Privacy-Preserving Health Data Aggregation Scheme, KSII Transactions on Internet and Information Systems. Vol. 10, no. 8, pp. 3852-3864, 2016.
3. Jingcheng Song, Yining Liu, Jun Shao, Chunming Tang. A Dynamic Membership Data Aggregation (DMDA) Protocol for Smart Grid. Submitted to IEEE Systems Journal. (Minor revision) (博士生为第一作者)
数据被聚合或平均,虽然在很多场景下,仍然可以满足大数据分析处理的要求,但对于某些数据,被聚合则失去了意义。比如某个群体的人的平均身高,是有意义的,但如果血压值和脉博值被平均,则没有意义。因此需要同时保证数据的原始性,和数据的隐私性。发表论文详细信息为:
1. Yining Liu, Yanping Wang, Xiaofen Wang, et al. Privacy-preserving data collection for mobile phone sensing tasks. ISPEC’2018. LNCS 11125, pp. 506-518, 2018. (中国密码学会推荐会议)
2. Yining Liu, Yanping Wang, Xiaofen Wang, et al. Privacy-preserving raw data collection without a trusted authority for IoT. Computer Networks. Doi: 10.1016/j.comnet.2018.11.028(CCF推荐B类期刊)
轻量级认证协议
基于Shamir的Secret Sharing以及大整数分解的困难性,设计了满足计算安全的密钥分发协议,能够有效抵抗内部人攻击与外部人攻击,于2013年发表在 IEEE Transactions on Computers(体系结构领域顶级期刊)。
设计了面向智能电网的轻量级通信协议,大幅降低了智能电表的存储与通信复杂度,文章2016年2月发表于IEEE Sensors Journal,于2016年9月被能源类顶级期刊Renewable and Sustainable Energy Reviews (IF=6.798)的综述文章“Smart grid technologies and Applications”( DOI: 10.1016/j.rser.2016.08.002 )正面引用。 2017年5月被IEEE Transactions on Smart Grid的文章 “An Ultra-Lightweight and Secure Scheme for Communications of Smart Meters and Neighborhood Gateways by Utilization of an ARM Cortex-M Microcontroller”(DOI: 10.1109/TSG.2017.2705763)作为主要的参考文献引用,成为该篇文章的主要研究基础。2019年2月,被IEEE中排名第一的期刊IEEE Communications Surveys & Tutorials的综述文章“Smart Grid Metering Networks: A Survey on Security, Privacy and Open Research Issues” (DOI:10.1109/COMST.2019.2899354)正面引用。
云平台为数据备份存储提供了便利,但需要云平台是可信任的为前提,否则,数据的安全性无法保障。通常需要上传至云平台的数据需要加密,但如何保存加解密密钥仍是一个问题。针对普通数据备份、图像数据备份,分别给出了具有现实可用性的存储与恢复协议,于2017年发表在IET Information Security(中国计算机学会推荐C类期刊、中国密码学会推荐B类期刊),并且连续几个月排在Popular Article的第一名。另外,该篇论文于2017年12月被Brunel University London的Omar Zeyad Akif博士(指导教授为Professor Hamed AI-Raweshidy, Director of the Wireless Networks and Communications Centre (WNCC) and Director of PG studies (ECE) at Brunel University, London, UK.)的毕业论文正面引用。
发表论文详细信息为:
1. Yining Liu, Chi Cheng, Jianyu Cao, Tao Jiang. An Improved Authenticated Group Key Transfer Protocol Based on Secret Sharing. IEEE Transactions on Computers, vol. 62, no. 11, pp. 2335-2336, 2013. IF=2.916 中国计算机学会推荐A类期刊
2. Yining Liu, Chi Cheng, et al. A Lightweight Authenticated Communication Scheme for Smart Grid. IEEE Sensors Journal. vol. 16, no. 3, pp. 836-842, 2016.
3. Yining Liu, Qi Zhong, Liang Chang, et al. A Secure Data Backup Scheme Using Multi-Factor Authentication. IET Information Security, vol. 11, no. 5, pp. 250-255, 2017. IF=1.037 (中国计算机学会推荐C类期刊,中国密码学会推荐B类期刊)
秘密图像分享
从16年底开始,试图解决社交网络图像分享中的隐私保护问题,但一直没有找到有效的解决方法。在此过程中,对图像的秘密分享与恢复做了一些研究,论文详细信息如下:
1. Yining Liu, Qi Zhong, Jian Shen, ChinChen Chang. A Novel Image Protection Scheme using Bit-plane compression and Secret Sharing, Journal of the Chinese Institute of Engineers, vol. 40, no. 2, pp. 161-169, 2017.
2. Yining Liu, Qi Zhong, Ming Xie, Zubin Chen. A Multiple-Level Secret Image Sharing Scheme, Multimedia Tools and Application, vol. 77, no. 5, pp. 6017-6031, 2018. IF=1.530 (中国计算机学会推荐C类期刊)
3. Yining Liu, Zhen Wu. An Improved Threshold Multi-Level Image Recovery Scheme, Journal of Information Security and Application, 40, 166–172, 2018. (中国计算机学会推荐C类期刊)
区块链
17年下半年开始,对区块链做了一些跟踪学习和研究,试图从智能合约上做一些工作,18年发表两篇文章,分别是:
1. 刘忆宁, 周元健, 蓝如师, 唐春明. 基于区块链的云数据删除验证协议, 计算机研究与发展,vol. 55, no. 10, pp. 2199-2207, 2018.
2. YuanJian Zhou, Yining Liu. An improved FOO voting scheme using Block-chain. Accepted by Computers, Materials & Continua
具有可验证公平性的安全协议研究
设计了具有可验证公平性的微支付协议,极大的降低了通信及计算负担,特别适于移动平台,于2013年发表在Security and Communication Networks(中国计算机学会、中国密码学会推荐期刊),后续研究成果于2016年发表在Wireless Personal Communication.和电子与信息学报;设计了不需要可信第三方及延迟函数,具有可验证公平性的安全电子彩票协议,能抵抗各种合谋攻击,已有四篇论文分别于2007、2014、2016、2017发表在SCI期刊International Journal of Computer Mathematics, International Journal of Communication Systems和Journal of Internet Technology。其中发表在International Journal of Computer Mathematics的论文于2017年被里昂高等师范学校的Robert Riemann的博士论文《Towards Trustworthy Online Voting: Distributed Aggregation of Confidential Data》(导师为:Dr. Stéphane Grumbach)多次引用,对我们的方案的正确性、效率性均给予了正面评价。
基于AI的轨迹隐私保护
IoT采集生成出行轨迹,在上传到平台之前,需要在客户端对数据做相应的隐私化处理,目前主要有四种方法:轨迹抑制、k-匿名、差分隐私、假轨迹。其中用的最多的是假轨迹,主要是因为假轨迹生成不需要借助数据平台,只在客户端就可以实现。我们的主要工作,是用卷积神经网络来区分上传到数据平台的数据,哪些是真实的轨迹,哪些是生成的假轨迹。我们方案的识别率接近90%,文章已经投出,正在审稿中。
2019
Yining Liu, Yanping Wang. An improved electronic medical record system (IEMRS) using oblivious transfer, Journal of the Chinese Institute of Engineers, vol. 42, no. 1, pp. 48-53, 2019. IF=0.471 ESI Engineering
Zhen Wu, Yining Liu*, Dong Wang, ChingNung Yang. An Efficient Essential Secret Image Sharing Scheme Using Derivative Polynomial, Symmetry 11(1):69 DOI: 10.3390/sym11010069.
Zhe Xia, Yining Liu*, ChingFang Hsu, Chin-Chen Chang. An Information Theoretically Secure E-lottery Scheme Based on Symmetric Bivariate Polynomials. Symmetry 11(1):88, DOI: 10.3390/sym11010088
Chien-Ming Chen, Bin Xiang, Yining Liu and King-Hang Wang. A Secure Authentication Protocol for Vehicular Ad Hoc Network. IEEE Access, DOI 10.1109/ACCESS.2019.2891105.
Yining Liu, Yuanjian Zhou, Youliang Tian, Mingzhe Liu, Yanbin Zheng. Secure and Lightweight Remote Medical System, accepted by Journal of Internet Technology. IF=1.301 ESI Computer
Peng Wang, Yining Liu, Songzhan Lv. An improved lightweight identity authentication protocol for VANET. Accepted by Journal of Internet Technology. IF=1.301(博士生为第一作者)ESI Computer
YuanJian Zhou, Yining Liu. An improved FOO voting scheme using Block-chain. Accepted by Computers, Materials & Continua. ESI computer
Jingcheng Song, Yining Liu, Jun Shao, Chunming Tang. A Dynamic Membership Data Aggregation (DMDA) Protocol for Smart Grid. Submitted to IEEE Systems Journal (Minor revision)(博士生为第一作者) ESI Computer
2018
Yining Liu, Wei Guo, Chun-I Fan, Liang Chang, Chi Cheng. A Practical Privacy-Preserving Data Aggregation (3PDA) Scheme for Smart Grid, IEEE Transactions on Industrial Informatics, DOI: 10.1109/TII.2018.2809672. 一区, IF=5.430
Wei Guo, Jun Shao, Rongxing Lu, Yining Liu, Ali A. Ghorbani. A Privacy-Preserving Online Medical Prediagnosis Scheme for Cloud Environment. IEEE Access, vol. 6, no. 1, pp. 48946-48957, 2018. IF=3.557 二区 (硕士生为第一作者)
Yining Liu, Quanyu Zhao. E-Voting Scheme Using Secret Sharing and K-Anonymity. World Wide Web: Internet and Web Information Systems. DOI:10.1007/s11280-018-0575-0, IF=1.473, (中国计算机学会推荐B类期刊) , 三区 ESI Computer
Yining Liu, Yanping Wang, Xiaofen Wang, Zhe Xia, Jingfang Xu. Privacy-preserving raw data collection without a trusted authority for IoT. Computer Networks. Doi: 10.1016/j.comnet.2018.11.028 IF=2.522(CCF推荐B类期刊) 三区 ESI Computer
Yining Liu, Qi Zhong, Ming Xie, Zubin Chen. A Multiple-Level Secret Image Sharing Scheme, Multimedia Tools and Application, vol. 77, no. 5, pp. 6017-6031, 2018. IF=1.530 (中国计算机学会推荐C类期刊) ESI Computer
Yining Liu, Zhen Wu. An Improved Threshold Multi-Level Image Recovery Scheme, Journal of Information Security and Application, 40, 166–172, 2018. (中国计算机学会推荐C类期刊)
刘忆宁, 周元健, 蓝如师, 唐春明. 基于区块链的云数据删除验证协议, 计算机研究与发展,vol. 55, no. 10, pp. 2199-2207, 2018.
Yining Liu, Songzhan Lv, Peng Wang. Dynamic Anonymous Identity Authentication Scheme for VANET. International Journal of Communication Systems. DOI: 10.1002/dac.3892 IF=1.717 ESI Engineering
Yining Liu, Yanping Wang, Xiaofen Wang, Zhe Xia. Privacy-preserving data collection for mobile phone sensing tasks. ISPEC’2018. LNCS 11125, pp. 506-518, 2018. (中国密码学会推荐会议)
Yining Liu, Shih-Chi Wang, Yang Yang, Yeh-Cheng Chen, Hung-Min Sun. An Automatic UI Interaction Script Generator for Android Applications Using Activity Call Graph Analysis. EURASIA Journal of Mathematics, Science and Technology Education, vol. 14 no. 7, pp. 3159-3179, 2018.
2017
Xingxin Li, Youwen Zhu, Jian Wang, Zhe Liu, Yining Liu, Mingwu Zhang. On the Soundness and Security of Privacy-Preserving SVM for Outsourcing Data Classification. IEEE Transactions on Dependable and Secure Computing, vol. 15, no. 5, pp. 906-912, 2018. IF=2.926
Rushi Lan, Jinwen He, Shouhua Wang, Yining Liu, and Xiaonan Luo. A parameter-selection-based chaotic system, IEEE Transactions on Circuits and Systems II: Express Briefs, doi: 10.1109/TCSII.2018.2865255
Yining Liu, Wei Guo, Qi Zhong, Gang Yao. Lightweight Vehicular Authentication Protocol (LVAP) using Group Communication, International Journal of Communication Systems, vol. 30, no. 16, e3317, 2017. SCI, IF=1.717. ESI Engineering
Yining Liu, Qi Zhong, Liang Chang, Zhe Xia, Debiao He, Chi Cheng. A Secure Data Backup Scheme Using Multi-Factor Authentication. IET Information Security, vol. 11, no. 5, pp. 250-255, 2017. IF=0.890 (中国计算机学会推荐C类期刊,中国密码学会推荐B类期刊) ESI Computer
Yining Liu, Quanyu Zhao, Gao Liu, Liang Chang, Jian Shen. A Fairness-Enhanced Micropayment Scheme, Wireless Personal Communication. vol. 96, no. 4, pp. 5267-5278, 2017. IF=1.200 ESI Computer
Yining Liu, Gao Liu, Chin Chen Chang, Lottery Protocol Using Oblivious Transfer Based on ECC, Journal of Internet Technology, vol. 18, no. 2, pp. 279-286, 2017. SCI, IF=1.301. ESI Computer
Yining Liu, Qi Zhong, Jian Shen, ChinChen Chang. A Novel Image Protection Scheme using Bit-plane compression and Secret Sharing, Journal of the Chinese Institute of Engineers, vol. 40, no. 2, pp. 161-169, 2017. IF=0.471 ESI Engineering
刘忆宁, 赵全玉. 基于承诺的可验证公平性微支付. 电子与信息学报, vol. 39, no. 3, pp. 743-748, 2017.
Quanyu Zhao, Yining Liu, Gao Liu, ChinChen Chang. A Novel Micropayment Scheme with Variable Denomination. International Journal of Network Security, Vol.19, No.1, pp. 85-90, Jan. 2017.
2016
Yining Liu, Wei Guo, Chi Cheng, ChingFang Hsu, Junyan Qian, Changlu Lin. A Robust Electronic Voting Scheme Against Side Channel Attack. Journal of Information Science and Engineering, vol. 32, no. 6, pp. 1471-1486, 2016. IF=0.327 (中国密码学会推荐、密码科学技术国家重点实验室推荐C类期刊) ESI computer
Yining Liu, Gao Liu, Chi Cheng, Zhe Xia, Jian Shen. A Privacy-Preserving Health Data Aggregation Scheme, KSII Transactions on Internet and Information Systems. Vol. 10, no. 8, pp. 3852-3864, 2016. IF=0.611 ESI computer
Yining Liu, Chi Cheng, Tianlong Gu, Tao Jiang, Xiangming Li. A Lightweight Authenticated Communication Scheme for Smart Grid. IEEE Sensors Journal. vol. 16, no. 3, pp. 836-842, 2016. IF=2.617,JCR三区 ESI engineering
Yining Liu, Chi Cheng, Tao, Jiang, ChinChen Chang. A Practical Lottery Using Oblivious Transfer, International Journal of Communication Systems, vol. 29, no. 2, pp. 277-282, 2016. IF=1.717. ESI engineering
2015
Chi Cheng, Tao Jiang, Yining Liu and Mingwu Zhang. Security analysis of a homomorphic signature scheme for network coding. Security Comm. Networks. vol. 8, no. 18, pp. 4053–4060, Dec, 2015. 中国计算机学会、中国密码学会推荐C类期刊 ESI computer
Gao Liu, Yining Liu, Chenglian Liu, Zhuo Shi. Improved Convertible Multi-Authenticated Encryption Scheme, Journal of Information & Computational Science, vol. 12, no. 8, pp. 3231-3240.
Dong Wang, Chin-Chen Chang, Yining Liu, et al. Digital Image Scrambling Algorithm Based on Chaotic Sequence and Decomposition and Recombination of Pixel Values. International Journal of Network Security. Vol.17, No.3, PP.322-327, 2015.
2014
Yining Liu, Danzhu Lin, et al. An Improved t-out-of-n E-Lottery Protocol. International Journal of Communication Systems. vol. 27, no. 11, pp. 3223-3231, 2014. IF=1.717
2013
Yining Liu, Chi Cheng, Jianyu Cao, Tao Jiang. An Improved Authenticated Group Key Transfer Protocol Based on Secret Sharing. IEEE Transactions on Computers, vol. 62, no. 11, pp. 2335-2336, 2013. IF=3.052 中国计算机学会推荐A类期刊
Yining Liu, Jihong Yan. A lightweight micropayment scheme based on Lagrange interpolation formula. Security and Communication Networks. Vol. 6, no. 8, pp. 955-960, 2013. IF=0.904 中国计算机学会、中国密码学会推荐 C类期刊
2011
Yining Liu, Peiyong Sun, Jihong Yan, et al. An Improved Electronic Voting Scheme without a Trusted Random Number Generator. Inscrypt’2011, LNCS 7537, pp. 93-101. 中国计算机学会、中国密码学会推荐 C类会议
2010
Chi Cheng, Tao Jiang, Yining Liu. A novel class of 2-D binary sequences with zero correlation zone. IEEE Signal Processing Letters, vol. 17, no. 3, pp. 301-304, 2010.
刘忆宁,叶俊,曹建宇. 基于Fp上插值多项式的可验证随机数,四川大学学报(工程科学版), vol. 42, no. 6, pp. 105-108, 2010.
近几年培养的研究生:
2013级研究生 刘高 (获广西研究生创新项目资助,获中科院信息安全国家重点实验室研究生奖学金,现在西电网络空间安全学院读博士)
2014级研究生 钟婍(现在澳大利亚迪肯大学读博士) 赵全玉(获研究生国家奖学金,现在南京大学计算机学院读博士)
2015级研究生 郭巍(获广西研究生创新项目资助,获研究生国家奖学金,正在申请国家留学基金)
2016级研究生 王艳平(获研究生国家奖学金) 周元健(获研究生国家奖学金) 吴珍(获研究生国家奖学金) 宋精诚
2017级硕士生 潘家霁 曾志新 胡燕翔 吕松展
2017级博士生 王朋
2018级硕士生 陈景雪 王晓迪 程洪圆
2018级博士生 宋精诚
2019级博士生 曾志新 吴珍