基于区块链的物联网访问控制框架

doi:10.11772/j.issn.1001-9081.2019111931

计算机应用 ›› 2020, Vol. 40 ›› Issue (4): 931-941.DOI: 10.11772/j.issn.1001-9081.2019111931

• 区块链 • 下一篇

基于区块链的物联网访问控制框架

史锦山^1,2, 李茹^1,2, 松婷婷^1,2

1. 内蒙古大学计算机学院, 呼和浩特 010021;
2. 内蒙古自治区无线网络与移动计算重点实验室(内蒙古大学), 呼和浩特 010021

收稿日期:2019-11-05 修回日期:2019-11-26 出版日期:2020-04-10 发布日期:2019-12-17
通讯作者: 李茹
作者简介:史锦山(1990-),男,内蒙古呼和浩特人,博士研究生,CCF会员,主要研究方向:区块链、访问控制、物联网;李茹(1974-),女,内蒙古呼和浩特人,教授,博士,CCF高级会员,主要研究方向:区块链、数据挖掘、下一代互联网;松婷婷(1996-),女,内蒙古包头人,硕士研究生,CCF会员,主要研究方向:区块链。
基金资助:
国家自然科学基金资助项目（61862046）；内蒙古自治区科技计划项目（201702019）；赛尔网络下一代互联网技术创新项目（NGII20170415）。

Blockchain-based access control framework for Internet of things

SHI Jinshan^1,2, LI Ru^1,2, SONG Tingting^1,2

1. College of Computer Science, Inner Mongolia University, Hohhot Inner Mongolia 010021, China;
2. Inner Mongolia Autonomous Region Key Laboratory of Wireless Networking and Mobile Computing(Inner Mongolia University), Hohhot Inner Mongolia 010021, China

Received:2019-11-05 Revised:2019-11-26 Online:2020-04-10 Published:2019-12-17
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61862046),the Inner Mongolia Autonomous Region Science and Technology Program(201702019),the CERNET Innovation Project(NGII20170415).

摘要/Abstract

摘要： 物联网（IoT）中入网设备的海量性、动态性和设备轻量级是内在联系并同时存在的特征。为了同时满足上述三个特征，提出一种基于区块链的IoT访问控制（BBIAC）框架。首先提出了该框架下的BBIAC模型，在IoT授权过程中引入属性的概念以满足模型对海量性的支持；而区块链自身的分布式结构和身份认证方式为该模型提供了动态性的支持；同时，区块链自身提供的安全性和多机构信任使BBIAC模型可以将需要大规模计算和存储的部分部署在区块链中，使该模型支持轻量级的IoT设备。接着，介绍了BBIAC模型完整的工作流程。然后，通过着色Perti网（CPN）对BBIAC模型进行形式化的安全性评估，证明了BBIAC模型的安全性。实验结果表明，BBIAC适用于具有海量性、动态性和设备轻量级特征的IoT环境。

关键词: 访问控制, 区块链, 物联网, 属性, 着色Petri网

Abstract: The characteristics of massiveness,dynamics,and lightweight devices for network devices in the Internet of Things(IoT)are inherently connected and exist simultaneously. To satisfy these three characteristics simultaneously,a Blockchain-Based IoT Access Control(BBIAC)framework was proposed. Firstly,the BBIAC model under this framework was proposed,the concept of attribute was introduced into the process of IoT authorization to realize the model's support for massiveness;the distributed structure and identity authentication method of blockchain provide the support of dynamics for the model. Secondly,the complete workflow of BBIAC model was introduced. Thirdly,the formal safety assessment of BBIAC was performed by Colored Petri Network(CPN),and the security of the BBIAC model was proved. Experimental results show that BBIAC is suitable for IoT environments with characteristics of massiveness,dynamics and lightweight devices.

Key words: access control, blockchain, Internet of Things (IoT), attribute, Colored Petri Net (CPN)

中图分类号:

TP309.2

史锦山, 李茹, 松婷婷. 基于区块链的物联网访问控制框架[J]. 计算机应用, 2020, 40(4): 931-941.

SHI Jinshan, LI Ru, SONG Tingting. Blockchain-based access control framework for Internet of things[J]. Journal of Computer Applications, 2020, 40(4): 931-941.

参考文献

[1] 房梁, 殷丽华, 郭云川, 等. 基于属性的访问控制关键技术研究综述[J]. 计算机学报,2017,40(7):1680-1698.(FANG L,YIN L H,GUO Y C,et al. A survey of key technologies in attribute-based access control scheme[J]. Chinese Journal of Computers,2017,40(7):1680-1698.)
[2] CRUZ J P,KAJI Y,YANAI N. RBAC-SC:role-based access control using smart contract[J]. IEEE Access,2018,6:12240-12251.
[3] ALANSARI S,PACI F,SASSONE V. A distributed access control system for cloud federations[C]//Proceedings of the IEEE 37th International Conference on Distributed Computing Systems. Piscataway:IEEE,2017:2131-2136.
[4] ALANSARI S,PACI F,MARGHERI A,et al. Privacy-preserving access control in cloud federations[C]//Proceedings of the IEEE 10th International Conference on Cloud Computing. Piscataway:IEEE,2017:757-760.
[5] DI FRANCESCO MAESA D,MORI P,RICCI L. Blockchain based access control[C]//Proceedings of the IFIP International Conference on Distributed Applications and Interoperable Systems, LNCS 10320. Cham:Springer,2017:206-220.
[6] HASHEMI S H,FAGHRI F,CAMPBELL R H. Decentralized user-centric access control using PubSub over blockchain[EB/OL].[2019-05-23]. https://arxiv.org/pdf/1710.00110.pdf.
[7] OUADDAH A,ELKALAM A A,OUAHMAN A A. Towards a novel privacy-preserving access control model based on blockchain technology in IoT[M]//ROCHA Á,SERRHINI M,FELGUEIRAS C. Europe and MENA Cooperation Advances in Information and Communication Technologies,AISC 520. Cham:Springer,2017:523-533.
[8] OUADDAH A, ABOU ELKALAM A, AIT OUAHMAN A. FairAccess:a new blockchain-based access control framework for the Internet of things[J]. Security and Communication Networks, 2016,9(18):5943-5964.
[9] JEMEL M, SERHROUCHNI A. Decentralized access control mechanism with temporal dimension based on blockchain[C]//Proceedings of the IEEE 14th International Conference on e-Business Engineering. Piscataway:IEEE,2017:177-182.
[10] OUTCHAKOUCHT A,ES-SAMALI H,LEROY J P. Dynamic access control policy based on blockchain and machine learning for the Internet of things[J]. International Journal of Advanced Computer Science and Applications,2017,8(7):417-424.
[11] SHAFAGH H,BURKHALTER L,HITHNAWI A,et al. Towards blockchain-based auditable storage and sharing of IoT data[C]//Proceedings of the 2017 Cloud Computing Security Workshop. New York:ACM,2017:45-50.
[12] 梅颖. 基于区块链的物联网访问控制简化模型构建[J]. 中国传媒大学学报(自然科学版),2017,24(5):7-12.(MEI Y. Simplification model construction of Internet access control based on block chain[J]. Journal of Communication University of China, 2017,24(5):7-12.)
[13] ZYSKIND G,NATHAN O,PENTLAND A S. Decentralizing privacy:using blockchain to protect personal data[C]//Proceedings of the 2015 IEEE Security and Privacy Workshops. Piscataway:IEEE,2015:180-184.
[14] RIFI N,RACHKIDI E,AGOULMINE N,et al. Towards using blockchain technology for IoT data access protection[C]//Proceedings of the IEEE 17th International Conference on Ubiquitous Wireless Broadband. Piscataway:IEEE,2017:1-5.
[15] DUKKIPATI C,ZHANG Y,CHENG L C. Decentralized,blockchain based access control framework for the heterogeneous Internet of things[C]//Proceedings of the 3rd ACM Workshop on Attribute-Based Access Control. New York:ACM,2018:61-69.
[16] ZHANG Y,KASAHARA S,SHEN Y,et al. Smart contract-based access control for the Internet of things[J]. IEEE Internet of Things Journal,2019,6(2):1594-1605.
[17] RAMACHANDRAN A,KANTARCIOGLU M. Using blockchain and smart contracts for secure data provenance management[EB/OL].[2019-05-23]. https://arxiv.org/pdf/1709.10000.pdf.
[18] ALI G,AHMAD N,CAO Y,et al. Blockchain based permission delegation and Access Control in Internet of Things(BACI)[J]. Computers and Security,2019,86:318-334.
[19] DORRI A,KANHERE S S,JURDAK R,et al. Blockchain for IoT security and privacy:the case study of a smart home[C]//Proceedings of the 2017 IEEE International Conference on Pervasive Computing and Communications Workshops. Piscataway:IEEE, 2017:618-623.
[20] LIN C,HE D,HUANG X,et al. BSeIn:a blockchain-based secure mutual authentication with fine-grained access control system for industry 4.0[J]. Journal of Network and Computer Applications,2018,116:42-52.
[21] NOVO O. Blockchain meets IoT:an architecture for scalable access management in IoT[J]. IEEE Internet of Things Journal, 2018,5(2):1184-1195.
[22] ALPHAND O,AMORETTI M,CLAEYS T,et al. IoTChain:a blockchain security architecture for the Internet of things[C]//Proceedings of the 2018 IEEE Wireless Communications and Networking Conference. Piscataway:IEEE,2018:1-6.
[23] MA M,SHI G,LI F. Privacy-oriented blockchain-based distributed key management architecture for hierarchical access control in the IoT scenario[J]. IEEE Access,2019,7:34045-34059.
[24] LI N H,TRIPUNITARA M V. Security analysis in role-based access control[J]. ACM Transactions on Information and System Security(TISSEC). ACM,2006,9(4):391-420.
[25] HAO Y, LI Y, DONG X, et al. Performance analysis of consensus algorithm in private blockchain[C]//Proceedings of the 2018 IEEE Intelligent Vehicles Symposium. Piscataway:IEEE, 2018:280-285.

基于区块链的物联网访问控制框架

Blockchain-based access control framework for Internet of things

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	陈恒恒, 倪志伟, 朱旭辉, 金媛媛, 陈千. 基于聚类分析的差分隐私高维数据发布方法[J]. 计算机应用, 2021, 41(9): 2578-2585.
[2]	葛纪红, 沈韬. 基于区块链的能源数据访问控制方法[J]. 计算机应用, 2021, 41(9): 2615-2622.
[3]	申玉民, 王金龙, 胡殿凯, 刘星宇. 基于区块链的建筑信息模型图纸多人协同创作系统[J]. 计算机应用, 2021, 41(8): 2338-2345.
[4]	杨龙海, 王学渊, 蒋和松. 改进SM2签名方法的区块链数字签名方案[J]. 计算机应用, 2021, 41(7): 1983-1988.
[5]	陈葳葳, 曹利, 顾翔. 基于区块链的车联网电子取证模型[J]. 计算机应用, 2021, 41(7): 1989-1995.
[6]	卿欣艺, 陈玉玲, 周正强, 涂园超, 李涛. 基于中国剩余定理的区块链存储扩展模型[J]. 计算机应用, 2021, 41(7): 1977-1982.
[7]	杜心雨, 王化群. LTE-A网络中基于动态组的有效的身份认证和密钥协商方案[J]. 计算机应用, 2021, 41(6): 1715-1722.
[8]	陈家豪, 殷新春. 基于云雾计算的可追踪可撤销密文策略属性基加密方案[J]. 计算机应用, 2021, 41(6): 1611-1620.
[9]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[10]	赵小虎, 李晓. 基于多特征提取的图像语义描述算法[J]. 计算机应用, 2021, 41(6): 1640-1646.
[11]	李蓓, 张问银, 王九如, 赵伟, 王海峰. 基于区块链的密封式投标拍卖方案[J]. 计算机应用, 2021, 41(4): 999-1004.
[12]	包玉龙, 朱雪阳, 张文辉, 孙鹏飞, 赵颖琪. 物联网应用中访问控制智能合约的形式化验证[J]. 计算机应用, 2021, 41(4): 930-938.
[13]	樊玮, 王慧敏, 邢艳. 基于自编码器的多视图属性网络表示学习模型[J]. 计算机应用, 2021, 41(4): 1064-1070.
[14]	刘宏宇, 梁秀波, 吴俊涵. 基于Kubernetes的Fabric链码管理及高可用技术[J]. 计算机应用, 2021, 41(4): 956-962.
[15]	田志宏, 赵金东. 面向物联网的区块链共识机制综述[J]. 计算机应用, 2021, 41(4): 917-929.