The development of the Industrial Internet will generate a large amount of valuable data, known as industrial big data (IBD). By mining and utilizing IBD, enterprises can improve production efficiency, reduce costs and risks, optimize management processes, and innovate services and business models. However, IBD comes from various institutions in all walks of life and has features such as multisource, heterogeneity, and multimodality. And data sharing and trading (DS&T) occur in the Industrial Internet environment without mutual trust. These characteristics pose new challenges to analytics methods and privacy and security protection technologies. Therefore, this article aims to provide references for privacy-preserving and secure industrial big data analytics (IBDA) from three perspectives: 1) research framework; 2) platform architecture; and 3) key technologies. First, we review the current state of research on theories and technologies related to IBDA. Then, we reveal three challenges to secure and efficient IBDA. We take the analytics and utilization of IBD as systematic engineering, propose the research framework for privacy-preserving and secure IBDA, and point out the specific content to be studied. Further, we design the architecture of the IBDA platform with the idea of layering, including a function model, security architecture, and system architecture. Finally, detailed research proposals and potential technologies for IBD analytics and utilization are presented from three aspects: 1) data fusion and analytics; 2) data privacy and security protection; and 3) blockchain.

Autonomous vehicles (AVs) transform traditional commuting by decreasing congestion, improving road safety, and naturally integrate better with electric controls for flexible implementation of autonomous driving technologies. Indeed, electric-powered AVs or autonomous electric vehicles (AEVs) are benefiting each other in many aspects. While autonomy brings great efficiency in driving as well as battery use, electric vehicles (EVs) require less maintenance and drastically cut fuel costs. With AVs, a pivotal concern is within the realm of long-range autonomous valet parking (LAVP), such as diverse customer demands on parking (or drop-off/pick-up) for various journey planning. On the other hand, electric-powered AVs are typically with limited cruising range, and locating convenient charging services are also among the major impediments. As of yet, recent studies have started to investigate EV charging and LAVP in isolation as they rarely consider a joint optimization on user trip and energy refueling. Rather, we target in this work the integration of vehicle charging with autonomy in the sense of a systemic approach. Specifically, we propose an integrated AEV charging and LAVP management scheme, to resolve critical decision-making on convenient charging and parking management upon customer requirements during their journeys. The proposed scheme jointly considers charging reservations as well as parking duration at car parks (CPs), aiming to enable accurate predictions on future charging (and parking) states at CPs. Results show the advantage of our proposal over benchmarks, in terms of enhanced customer experiences in traveling period, as well as charging performances at both AEV and CP sides. Particularly, effective load balancing can be achieved across the network regarding the amount of charged as well as parked vehicles.

Blockchain is making headlines due to it promises to provide a decentralized, transparent, tamper-resistant, traceable and verifiable historical transaction records that can resist faults of any single node. According to the latest data from State of the Dapps, developers have currently released 3,717 Decentralized Applications (DApps), only three have an average of more than 10,000 daily active users. Most of the real-world DApps exercise little of their potential power. The key reason is that the current permissioned blockchain systems suffer from poor performance and lack of confidentiality. To address this issue, we present Hybridchain, a system that combines blockchain with Trusted Execution Environment (TEE). Hybridchain decouples computation from consensus and adopts hierarchical network to minimize the computational burden and latency of on-chain execution by performing most of the heavy-weight computation off-chain. Hybridchain leverages secure communication protocols to enable each participant to share transaction data in a secure way. To mitigate the small enclave memory restriction of TEE, Hybridchain extends the enclave memory that allows blockchain applications running in TEE to securely store transaction records to the whole key-value storage codes placed outside of TEE. Analysis and experiments of sealed-bid auction show that Hybridchain can support confidentiality-preserving along with high performance.

Tampering, forgery and theft of the measurement and control messages in a smart grid could cause one breakdown in the power system. However, no security measures are employed for communications in intelligent substations. Communication services in an intelligent substation have high demands for real-time performance, which must be considered when deploying security measures. This paper studies the security requirements of communication services in intelligent substations, analyzes the security capabilities and shortages of IEC 62351, and proposes a novel security scheme for intelligent substation communications. This security scheme covers internal and telecontrol communications, in which the real-time performance of each security measure is considered. In this scheme, certificateless public key cryptography (CLPKC) is used to avoid the latency of certificate exchange in certificate-based cryptosystem and the problem of key escrow in identity-based cryptosystem; the security measures of generic object-oriented substation event, sampled measure value and manufacturing message specification in IEC 62351 are improved to meet the real-time requirements of the messages as well as to provide new security features to resist repudiation and replay attacks; and the security at transport layer is modified to fit CLPKC, which implements mutual authentication by exchanging signatures. Furthermore, a deployment of CLPKC in an intelligent substation is presented. We also evaluate the security properties of the scheme and analyze the end-to-end delays of secured services by combining theoretical calculation and simulation in this paper. The results indicate that the proposed scheme meets the requirements of security and real-time performance of communications in intelligent substations.

To warn the cascading failures caused by cyberattacks (CFCAs) in real time and reduce their damage on cyber-physical power systems (CPPSs), a novel early warning method based on attack gains and cost principle (AGCP) is proposed. Firstly, according to the CFCA characteristics, the leading role of attackers in the whole evolutionary process is discussed. The breaking out of a CFCA is deduced based on the AGCP from the view of attackers, and the priority order of all CFCAs is then provided. Then, the method to calculate the probability of CFCAs is proposed, and an early warning model for CFCA is designed. Finally, to verify the effectiveness of this method, a variety of CFCAs are simulated in a local CPPS model based on the IEEE 39-bus system. The experimental results demonstrate that this method can be used as a reliable assistant analysis technology to facilitate early warning of CFCAs.

Wide Area Protection System (WAPS) undertakes the important task of maintaining system reliability and stability when the power system is subject to abnormal or predetermined unstable conditions. The existing WAPS adopts a centralized mechanism to record and audit communication messages, which faces the risk of excessive authority and tampering with communication records and audit logs, thus making it impossible to achieve true transparency and fairness. Due to the involvement of multiple parties and equipment maintained by different manufacturers in the communication of WAPS, there are difficulties in tracing the cause of the accident and determining the at-fault party following misoperations and miss trips. To address this issue, we propose a semi-centralized blockchain system with multi-chain for auditing communications of WAPS. We first propose a semi-centralized system architecture according to the system architecture and management requirements of WAPS. Then, we utilize the blockchain network as a self-recording channel to achieve tamper-proof and non-repudiation verification interaction. We also design a multi-chain structure and classification node mechanism to meet the communication auditing requirements of multiple WAPS. We have designed a new block structure that conforms to the communication protocol of WAPS. To reduce the storage burden caused by the ever-expanding blockchain ledger, we propose a deletable blockchain scheme while maintaining the integrity and security of blockchain. Analysis and experiments show that the proposed blockchain system can support the secure, transparent, tamper-proof and traceable communication recording and auditing of WAPS along with high performance.