基于比特币区块链的公共无线局域网接入控制隐私保护研究

doi:10.11959/j.issn.2096-109x.2020022

网络与信息安全学报 ›› 2020, Vol. 6 ›› Issue (2): 56-66.doi: 10.11959/j.issn.2096-109x.2020022

所属专题：区块链

基于比特币区块链的公共无线局域网接入控制隐私保护研究

牛玉坤¹,魏凌波¹(),张驰¹,张霞²,GustavoVejarano³

¹ 中国科学技术大学信息科学技术学院，安徽合肥 230026
² 武汉理工大学计算机科学与技术学院，湖北武汉 430047
³ Department of Electrical Engineering and Computer Science,Loyola Marymount University,Los Angeles,CA 90045

修回日期:2020-02-22 出版日期:2020-04-15 发布日期:2020-04-23
作者简介:牛玉坤（1989- ），男，河南周口人，中国科学技术大学博士生，主要研究方向为应用密码学和区块链技术|魏凌波（1979- ），女，陕西周至人，博士，中国科学技术大学副研究员，主要研究方向为应用密码学和区块链技术|张驰（1977- ），男，广西百色人，博士，中国科学技术大学副教授，主要研究方向为无线网络、网络安全和区块链技术|张霞（1979- ），女，湖北武汉人，博士，武汉理工大学讲师，主要研究方向为无线网络和区块链技术|Gustavo Vejarano（1982- ），男，哥伦比亚人，博士，洛约拉马利蒙特大学副教授，主要研究方向为无线网络和安全技术
基金资助:
国家自然科学基金资助项目(61702474);国家重点研发计划基金资助项目(2018YFB0804201)

Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain

Yukun NIU¹,Lingbo WEI¹(),Chi ZHANG¹,Xia ZHANG²,Vejarano Gustavo³

¹ School of Information Science and Technology,University of Science and Technology of China,Hefei 230026,China
² School of Computer Science and Technology,Wuhan University of Technology,Wuhan 430047,China
³ Department of Electrical Engineering and Computer Science,Loyola Marymount University,Los Angeles 90045,USA

Revised:2020-02-22 Online:2020-04-15 Published:2020-04-23
Supported by:
The Natural Science Foundation of China(61702474);The National Key R＆D Program of China(2018YFB0804201)

摘要/Abstract

摘要：

在公共无线局域网的访问控制中，用户隐私保护和用户可问责性是一对相互冲突的目标。针对该问题，提出了一种基于比特币区块链和Intel SGX的匿名且可问责用户管理与访问控制方案。在不修改已有的比特币协议的前提下，实现了对公共无线局域网访问凭证的安全管理，而无须依赖可信第三方；采用基于Intel SGX的混合技术，通过较小的开销提供了用户可控的访问凭证匿名性保护；设计的区块链验证路径规则在保持用户隐私的同时实现了对恶意用户的问责。理论分析和实验结果验证了该方案的安全性和可行性。

关键词: WLAN访问控制, 比特币区块链, IntelSGX, 匿名性, 可问责性, 认证

Abstract:

In designing an access control scheme for public wireless LAN (WLAN),user privacy protection and user accountability are two conflict goals.A novel user management and access control scheme was proposed to solve this problem by utilizing the bitcoin blockchain and Intel SGX.It utilized unmodified bitcoin blockchain to manage the ownership of access credentials for users without relying on any trusted third party.It adopted Intel SGX-based mixing technology to enhance anonymity of users’ access credentials.It designed verification path rule to resolve the conflicts between the privacy-preserving and accountability objectives.The effectiveness and feasibility of the proposed scheme are also demonstrated by security analysis and performance evaluation.

Key words: WLAN access control, bitcoin blockchain, Intel SGX, anonymity, accountability, authentication

中图分类号:

TP302

牛玉坤,魏凌波,张驰,张霞,GustavoVejarano. 基于比特币区块链的公共无线局域网接入控制隐私保护研究[J]. 网络与信息安全学报, 2020, 6(2): 56-66.

Yukun NIU,Lingbo WEI,Chi ZHANG,Xia ZHANG,Vejarano Gustavo. Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 56-66.

图/表 8

图1

图2

图3

图4

图5

表1

图6

图7

参考文献 23

[1]	PISA C , CAPONI A , DARGAHI T ,et al. WI-FAB:attribute-based WLAN access control,without pre-shared keys and backend infra-structures[C]// Proceedings of the 8th ACM International Work shop on Hot Topics in Planet-Scale Mobile Computing and Online Social Networking. 2016: 31-36.
[2]	CASSOLA A , BLASS E O , NOUBIR G . Authenticating privately over public Wi-Fi hotspots[C]// Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. 2015: 1346-1357.
[3]	LOU W , REN K . Security,privacy,and accountability in wireless access networks[J]. IEEE Wireless Communications, 2009,16(4): 80-87.
[4]	TSANG P P , AU M H , KAPADIA A ,et al. Blacklistable anonymous credentials:blocking misbehaving users without TTPS[C]// Proceedings of the 14th ACM Conference on Computer and Communications Security. 2007: 72-81.
[5]	TSANG P P , AU M H , KAPADIA A ,et al. PEREA:Towards practical TTP-free revocation in anonymous authentication[C]// Proceedings of the 15th ACM Conference on Computer and Communications Security. 2008: 333-344.
[6]	NIU Y , WEI L , ZHANG C ,et al. An anonymous and accountable authentication scheme for Wi-Fi hotspot access with the bitcoin blockchain[C]// 2017 IEEE/CIC International Conference on Communications in China (ICCC). 2017: 1-6.
[7]	RUFFING T , MORENO-SANCHEZ P , KATE A . CoinShuffle:practical decentralized coin mixing for bitcoin[C]// European Symposium on Research in Computer Security. 2014: 345-364.
[8]	MARTIN J , MAYBERRY T , DONAHUE C ,et al. A study of MAC address randomization in mobile devices and when it fails[J]. Proceedings on Privacy Enhancing Technologies, 2017,2017(4): 365-383.
[9]	DINGLEDINE R , MATHEWSON N , SYVERSON P . Tor:the second-generation onion router[R]. Naval Research Lab Washington DC, 2004.
[10]	BRASSER F , MüLLER U , DMITRIENKO A ，et al. Software grand exposure:SGX cache attacks are practical[C]// 11th USENIX Workshop on Offensive Technologies (WOOT 17). 2017.
[11]	H?HNEL M , CUI W , PEINADO M . High-resolution side channels for untrusted operating systems[C]// 2017 USENIX Annual Technical Conference (USENIX ATC 17). 2017: 299-312.
[12]	G?TZFRIED J , ECKERT M , SCHINZEL S ,et al. Cache attacks on Intel SGX[C]// Proceedings of the 10th European Workshop on Systems Security. 2017:2.
[13]	MOGHIMI A , IRAZOQUI G , EISENBARTH T . Cachezoom:how SGX amplifies the power of cache attacks[C]// International Conference on Cryptographic Hardware and Embedded Systems. 2017: 69-90.
[14]	SCHWARZ M , WEISER S , GRUSS D ,et al. Malware guard extens sion:using SGX to conceal cache attacks[C]// International Conference on Detection of Intrusions and Malware,and Vulnerability Assessment. 2017: 3-24.
[15]	WANG W , CHEN G , PAN X ,et al. Leaky cauldron on the dark land:understanding memory side-channel hazards in SGX[C]// Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. 2017: 2421-2434.
[16]	STRACKX R , PIESSENS F . Ariadne:a minimal approach to state continuity[C]// 25th USENIX Security Symposium (USENIX Security 16). 2016: 875-892.
[17]	CHEN S , ZHANG X , REITER M K ,et al. Detecting privileged side-channel attacks in shielded execution with Déjá Vu[C]// Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security. 2017: 7-18.
[18]	COSTAN V , LEBEDEV I , DEVADAS S . Sanctum:minimal hardware extensions for strong software isolation[C]// 25th USENIX Security Symposium (USENIX Security 16). 2016: 857-874.
[19]	GRUSS D , LETTNER J , SCHUSTER F ,et al. Strong and efficient cache side-channel protection using hardware transactional memory[C]// 26th USENIX Security Symposium (USENIX Security 17). 2017: 217-233.
[20]	SHIH M W , LEE S , KIM T ,et al. T-SGX:eradicating controlled-channel attacks against enclave programs[C]// NDSS. 2017.
[21]	SHINDE S , CHUA Z L , NARAYANAN V ,et al. Preventing page faults from telling your secrets[C]// Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security. 2016: 317-328.
[22]	MISHRA P , PODDAR R , CHEN J ,et al. Oblix:an efficient oblivious search index[C]// 2018 IEEE Symposium on Security and Privacy (S＆P). IEEE, 2018: 279-296.
[23]	Crypto++[EB].

参数	值
签名算法	ECDSA
加密算法	ECIES + AES-256 CBC模式
椭圆曲线	secp256k1
哈希算法	SHA-256
无线通信带宽	10 Mbit/s

基于比特币区块链的公共无线局域网接入控制隐私保护研究

Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain

在线阅读

pdf下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 8

参考文献 23

相关文章 15

Metrics

推荐阅读 0

[1]	朱春陶, 尹承禧, 张博林, 殷琪林, 卢伟. 基于多域时序特征挖掘的伪造人脸检测方法[J]. 网络与信息安全学报, 2023, 9(3): 123-134.
[2]	曹进, 石小平, 马如慧, 李晖. 融合双层卫星网络的星地和星间AKA协议[J]. 网络与信息安全学报, 2023, 9(1): 18-31.
[3]	郭辉, 罗勇, 郭晓潞. 基于国密算法的车载以太网控制器身份认证方法[J]. 网络与信息安全学报, 2022, 8(6): 20-28.
[4]	刘军, 袁霖, 冯志尚. 集群网络密钥管理方案研究综述[J]. 网络与信息安全学报, 2022, 8(6): 52-69.
[5]	肖敏, 姚涛, 刘媛妮, 黄永洪. 具有隐私保护的动态高效车载云管理方案[J]. 网络与信息安全学报, 2022, 8(6): 70-83.
[6]	姜奇, 冯茹, 张瑞杰, 王金花, 陈婷, 魏福山. 基于GRU的智能手机多场景步态认证[J]. 网络与信息安全学报, 2022, 8(5): 26-39.
[7]	张娴, 朱建明, 隋智源, 明盛智. 数字货币交易匿名性与监管的博弈分析[J]. 网络与信息安全学报, 2022, 8(5): 150-157.
[8]	易聪, 胡军. 新的基于鼠标行为的持续身份认证方法[J]. 网络与信息安全学报, 2022, 8(5): 179-188.
[9]	陈立全, 李潇, 杨哲懿, 钱思杰. 基于区块链的高透明度PKI认证协议[J]. 网络与信息安全学报, 2022, 8(4): 1-11.
[10]	牛建林, 任志宇, 杜学绘. 基于联盟链的跨域认证方案[J]. 网络与信息安全学报, 2022, 8(3): 123-133.
[11]	张伟成, 卫红权, 刘树新, 普黎明. 5G移动边缘计算场景下的快速切换认证方案[J]. 网络与信息安全学报, 2022, 8(3): 154-168.
[12]	徐子钧, 刘建伟, 李耕. 面向5G mMTC的网络切片安全研究[J]. 网络与信息安全学报, 2022, 8(1): 95-105.
[13]	邱洁, 韩瑞, 魏志丰, 王志洋. 网络空间公共基础设施体系及安全策略研究[J]. 网络与信息安全学报, 2021, 7(6): 56-67.
[14]	杨冠群, 刘荫, 徐浩, 邢宏伟, 张建辉, 李恩堂. 基于区块链的电网可信分布式身份认证系统[J]. 网络与信息安全学报, 2021, 7(6): 88-98.
[15]	宋永成, 黄欣沂, 伍玮, 陈海霞. 基于编码的数字签名综述[J]. 网络与信息安全学报, 2021, 7(4): 1-17.