Research And Realization Of Security Mechanism In Smart Lighting System

The intelligent connected lighting system has been accessed to market since 2012.This competitive system is now facing some new security challenges.The thesis conducted some pioneering work on the security of intelligent lighting system,and provided some new ideas and methods for the field.The author firstly introduced the background of this thesis,and then summarized the new security challenges of the intelligent lighting industry.On the basis of a summary about other researchers' work,the paper chose Philips Hus lighting system as its object to study the security mechanism.The research could be divided into three aspects,security threats modeling,summary of the security technologies,and security policy design.By using the STRIDE modeling method,the paper modeled security threats of the whole system throughout descriptions of the threats.Compared to the security modeling based on attack tree,this method would be more applicative.The thesis also conducted an actual reverse work on the application Hue and a penetration testing on the lighting controller of the system,and then came to the conclusion that the two components had vulnerabilities on information disclosure and unauthorized operation.On the basis of conclusion of the security testing,the paper summarized key technologies of the protection for terminal application on the aspects of data and code,and proposed a new model for application security reinforcement.Referred to the data exchange process in HTTPS,we also proposed a new authentication-based method for function loading,and realized its local function.This kind of method added encryption to the traditional Java reflection mechanism,which would provide better protection on core logic of the application.By analyzing the results of security tests,the thesis concluded three key problems of the lighting controller,which were unauthorized access,application tampering,and information disclosure.Solving the three problems,the thesis respectively designed security policies and realized their functions.