物联网环境下基于区块链技术的私有数据访问控制模型

doi:10.11959/j.issn.2096-3750.2022.00304

物联网学报 ›› 2022, Vol. 6 ›› Issue (4): 169-182.doi: 10.11959/j.issn.2096-3750.2022.00304

物联网环境下基于区块链技术的私有数据访问控制模型

蒋伟进¹^,²^,³, 罗田甜²^,⁴, 杨莹¹^,³, 李恩¹^,³, 周文颖¹^,³

¹ 数据智能与智慧社会国家重点实验室（培育）基地，湖南长沙 410205
² 新零售虚拟现实技术湖南省重点实验室，湖南长沙 410205
³ 湖南工商大学计算机学院，湖南长沙 410205
⁴ 湖南工商大学前沿交叉学院，湖南长沙 410205

修回日期:2022-10-17 出版日期:2022-12-30 发布日期:2022-12-01
作者简介:蒋伟进（1964- ），男，博士，湖南工商大学计算机学院二级教授，主要研究方向为网络安全、社会计算、区块链技术和群体智能感知
罗田甜（1998- ），女，湖南工商大学前沿交叉学院硕士生，主要研究方向为区块链技术、网络安全和社会计算
杨莹（1999- ），女，湖南工商大学计算机学院硕士生，主要研究方向为复杂网络、网络安全和区块链技术
李恩（1995- ），男，湖南工商大学计算机学院硕士生，主要研究方向为网络安全和区块链技术
周文颖（1999- ），女，湖南工商大学计算机学院硕士生，主要研究方向为网络安全、区块链技术和社会计算
基金资助:
国家自然科学基金资助项目(61772196);湖南省自然科学基金资助项目(2020JJ4249);湖南省研究生科研创新项目(CX20221139);湖南省教育厅科学研究重点项目(21A0374)

Private data access control model based on block chain technology in the internet of things environment

Weijin JIANG¹^,²^,³, Tiantian LUO²^,⁴, Ying YANG¹^,³, En LI¹^,³, Wenying ZHOU¹^,³

¹ State Key Laboratory of Data Intelligence and Smart Society Laboratory(Cultivating) Base, Changsha 410205, China
² Key Laboratory of Hunan Province for New Retail Virtual Reality Technology, Changsha 410205, China
³ School of Computer Science, Hunan University of Technology and Business, Changsha 410205, China
⁴ School of Advanced Interdisciplinary Studies, Hunan University of Technology and Business, Changsha 410205, China

Revised:2022-10-17 Online:2022-12-30 Published:2022-12-01
Supported by:
The National Natural Science Foundation of China(61772196);The National Natural Science Foundation of Hunan Province(2020JJ4249);The Hunan Provincial Innovation Foundation for Postgraduate(CX20221139);The Key Scientific Research Project of Hunan Provincial Department of Education(21A0374)

摘要/Abstract

摘要：

基于传统“中心化”的访问控制技术已经无法保证当前物联网环境中私有数据访问控制的安全性问题。以基于属性的访问控制（ABAC, attribute-based access control）模型为基础，提出了一种基于区块链的物联网访问控制框架和私有数据访问控制模型。首先，对访问控制的基本框架与流程进行了详细的阐述与分析，并提出了可审计的访问控制模型，通过存储在区块链网络中的请求、响应和访问记录，对私有数据的访问控制策略进行系统管理；接着，提出了一种基于区块链技术的可审计访问控制系统，可以在物联网中提供分布式、细粒度和动态性的访问控制管理，实现了对数据的有效管理和可审计访问，并采用基于智能合约的访问控制方法实现对物联网资源全程透明、可追溯、自动化的访问控制。最后，通过仿真实验和性能测试验证了该访问控制模型和系统的有效性和安全性。

关键词: 区块链, 物联网, 访问控制, 智能合约, 数据安全

Abstract:

The traditional “centralized” access control technology can no longer guarantee the security of private data access control in the current internet of things environment.Based on the ABAC (attribute-based access control) model, a blockchain based access control framework for the internet of things and a private data access control model were proposed.Firstly, the basic framework and process of access control were described and analyzed in detail, and an auditable access control model was proposed to systematically manage the access control policies of private data through the requests, responses and access records stored in the blockchain network.Then, an auditable access control system based on blockchain technology was proposed, which can provide distributed, fine-grained and dynamic access control management in the internet of things, realize the effective management and auditable access to data, and adopt the access control method based on smart contract to realize the transparent, traceable and automatic access control over the internet of things resources.Finally, simulation experiments and performance tests verify the effectiveness and security of the access control model and system.

Key words: blockchain, IoT, access control, smart contract, data security

中图分类号:

TP309

蒋伟进, 罗田甜, 杨莹, 李恩, 周文颖. 物联网环境下基于区块链技术的私有数据访问控制模型[J]. 物联网学报, 2022, 6(4): 169-182.

Weijin JIANG, Tiantian LUO, Ying YANG, En LI, Wenying ZHOU. Private data access control model based on block chain technology in the internet of things environment[J]. Chinese Journal on Internet of Things, 2022, 6(4): 169-182.

图/表 14

表1

表2

图1

图2

图3

表3

表4

图4

表5

图5

图6

图7

图8

图9

参考文献 13

[14]	ZYSKIND G , NATHAN O , PENTLAND A . Decentralizing privacy:using blockchain to protect personal data[C]// Proceedings of 2015 IEEE Security and Privacy Workshops. Piscataway:IEEE Press, 2015: 180-184.
[15]	KO??áL K , HELEBRANDT P , BELLU? M , ,et al. Management and monitoring of IoT devices using blockchain[J]. Sensors (Basel,Switzerland), 2019,19(4): 856.
[16]	DING S , CAO J , LI C ,et al. A novel attribute-based access control scheme using blockchain for IoT[J]. IEEE Access, 2019(7): 38431-38441.
[17]	ZHOU L , WANG L , AI T ,et al. BeeKeeper 2.0:confidential blockchain-enabled IoT system with fully homomorphic computation[J]. Sensors (Basel,Switzerland), 2018,18(11): E3785.
[18]	HENRY R , HERZBERG A , KATE A . Blockchain access privacy:challenges and directions[J]. IEEE Security ＆ Privacy, 2018,16(4): 38-45.
[19]	CAI Z P , ZHENG X . A private and efficient mechanism for data uploading in smart cyber-physical systems[J]. IEEE Transactions on Network Science and Engineering, 2020,7(2): 766-775.
[20]	KUZMIN A , . Blockchain-based structures for a secure and operate IoT[C]// Proceedings of 2017 Internet of Things Business Models,Users,and Networks. Piscataway:IEEE Press, 2017: 1-7.
[21]	ZHANG Y Y , KASAHARA S , SHEN Y L ,et al. Smart contract-based access control for the internet of things[J]. IEEE Internet of Things Journal, 2019,6(2): 1594-1605.
[22]	PAL S , RABEHAJA T , HITCHENS M ,et al. On the design of a flexible delegation model for the internet of things using blockchain[J]. IEEE Transactions on Industrial Informatics, 2020,16(5): 3521-3530.
[23]	SONG L H , LI M C , ZHU Z K ,et al. Attribute-based access control using smart contracts for the internet of things[J]. Procedia Computer Science, 2020,174: 231-242.
[24]	SAINI A , ZHU Q Y , SINGH N ,et al. A smart-contract-based access control framework for cloud smart healthcare system[J]. IEEE Internet of Things Journal, 2021,8(7): 5914-5925.
[25]	YANG W T , GUAN Z T , WU L F ,et al. Secure data access control with fair accountability in smart grid data sharing:an edge blockchain approach[J]. IEEE Internet of Things Journal, 2021,8(10): 8632-8643.
[1]	LIU H , HAN D Z , LI D . Fabric-IoT:a blockchain-based access control system in IoT[J]. IEEE Access, 2020(8): 18207-18218.
[2]	BABUN L , DENNEY K , CELIK Z B ,et al. A survey on IoT platforms:communication,security,and privacy perspectives[J]. Computer Networks, 2021,192:108040.
[3]	YANG Y S , ZHONG M S , YAO H Q ,et al. Internet of things for smart ports:technologies and challenges[J]. IEEE Instrumentation ＆ Measurement Magazine, 2018,21(1): 34-43.
[4]	史锦山, 李茹 . 物联网下的区块链访问控制综述[J]. 软件学报, 2019,30(6): 1632-1648.
	SHIJ S , LI R . Survey of blockchain access control in Internet of Things[J]. Journal of Software, 2019,30(6): 1632-1648.
[5]	HU V C , KUHN D R , FERRAIOLO D F ,et al. Attribute-based access control[J]. Computer, 2015,48(2): 85-88.
[6]	ZENG S A , HUO R , HUANG T ,et al. Survey of blockchain:principle,progress and application[J]. Journal on Communications. 2020,41(01): 134-151.
[7]	田国华, 胡云瀚, 陈晓峰 . 区块链系统攻击与防御技术研究进展[J]. 软件学报, 2021,32(5): 1495-1525.
	TIAN G H , HU Y H , CHEN X F . Research progress on attack and defense techniques in block-chain system[J]. Journal of Software, 2021,32(5): 1495-1525.
[8]	房梁, 殷丽华, 郭云川 ,等. 基于属性的访问控制关键技术研究综述[J]. 计算机学报, 2017,40(7): 1680-1698.
	FANG L , YIN L H , GUO Y C ,et al. A survey of key technologies in attribute-based access control scheme[J]. Chinese Journal of Computers, 2017(7): 1680-1698.
[9]	SUDARSAN S V , SCHELéN O , BODIN U . Survey on delegated and self-contained authorization techniques in CPS and IoT[J]. IEEE Access, 2021(9): 98169-98184.
[10]	BELIM S , BELIM S . Implementation of mandatory access control in distributed systems[J]. Automatic Control and Computer Sciences, 2018,52(8): 1124-1126.
[11]	KAMBOJ P , KHARE S , PAL S . User authentication using Blockchain based smart contract in role-based access control[J]. Peer-to-Peer Networking and Applications, 2021,14(5): 2961-2976.
[12]	AGHILI S F , SEDAGHAT M , SINGELéE D , ,et al. MLS-ABAC:efficient multi-level security attribute-based access control scheme[J]. Future Generation Computer Systems, 2022,131: 75-90.
[13]	刘明达, 陈左宁, 拾以娟 ,等. 区块链在数据安全领域的研究进展[J]. 计算机学报, 2021,44(1): 1-27.
[26]	FOTIOU N , PITTARAS I , SIRIS V A ,et al. Secure IoT access at scale using blockchains and smart contracts[C]// Proceedings of 2019 IEEE 20th International Symposium on. Piscataway:IEEE Press, 2019: 1-6.
[13]	LIU M D , CHENZ N , SHIY J ,et al. Research progress of blockchain in data security[J]. Chinese Journal of Computers, 2021,44(1): 1-27.

对比项	作用	优点	缺点
DAC^[9]	主体对客体的访问权限能够进行自主管理，主体决定是否将客体的全部或部分访问权限授予给其他主体	灵活性较高，也具有一定的可扩展性	安全性较差，开销大，静态分配权限
MAC^[10]	主体和客体都被系统分配一个固定的安全属性，安全属性决定一个主体是否可以访问某个客体	信息的机密性较高，安全性较高	灵活性比较差，静态分配权限
RBAC^[11]	权限和角色相关联，通过为主体分配适当的角色，其能够获得相应角色的权限	明确责任和授权，安全性和灵活性较高	粗粒度控制，静态分配权限

符号	含义
PK_owner/user	数据所有者或数据请求者的公钥
SK_owner/user	数据所有者或数据请求者的私钥
Data_Pri	隐私数据数据包
Data_Pub	公共数据数据包
Data_Ipfs	公共数据的IPFS地址
Key_resource	与数据资源对应的键值
Key_policy	与策略对应的键值
Key_request	与请求记录对应的键值
Key_response	与响应记录对应的键值
Sign( )	ECDSA的签名算法
Verify( )	ECDSA的验证算法
Hash( )	计算哈希值

属性			模型
属性	文献[21]	文献[22]	文献[24]	文献[25]	所提模型
隐私性	×	√	√	×	√
可撤销性	√	×	√	×	√
云存储	×	×	√	√	√
兼容性	×	×	×	√	√
可审计性	×	√	×	×	√
区块链	公有	私有	私有	联盟	联盟

物联网环境下基于区块链技术的私有数据访问控制模型

Private data access control model based on block chain technology in the internet of things environment

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 14

参考文献 13

相关文章 15

Metrics

推荐阅读 0

[1]	吴靖, 李晟, 张景, 辛明, 陶若文, 周舟, 潘力佳, 施毅. 面向物联网的新型柔性传感器[J]. 物联网学报, 2023, 7(2): 1-14.
[2]	梁峻阁, 宋怡然, 孙杨帆, 计樱莹, 潘力佳, 施毅. 基于可穿戴与可植入技术的人体健康物联网研究进展[J]. 物联网学报, 2023, 7(2): 26-34.
[3]	耿光磊, 高博, 熊轲, 樊平毅, 陆杨, 王煜炜. 联邦学习赋能6G网络综述[J]. 物联网学报, 2023, 7(2): 50-66.
[4]	卫浓钰, 江子龙, 陈芳炯. 基于位置信息和能量均衡的声电协同网络AODV[J]. 物联网学报, 2023, 7(1): 27-36.
[5]	申滨, 李银波, 梁枭伟. 基于增强加权质心定位的认知物联网用户频谱接入控制[J]. 物联网学报, 2023, 7(1): 93-108.
[6]	蒋伟进, 周文颖, 李恩, 罗田甜, 杨莹. 基于区块链技术的云制造服务架构及共识算法研究[J]. 物联网学报, 2023, 7(1): 159-173.
[7]	汪静, 何乐生, 李忠红, 李路迟, 杨航. 物联网轻量级认证加密算法ASCON的软硬件协同设计[J]. 物联网学报, 2022, 6(4): 139-148.
[8]	邢方圆, 贺诗波, 孙铭阳, 陈积明. 基于“云-管-边-端”物联网架构的碳排放监测[J]. 物联网学报, 2022, 6(4): 53-64.
[9]	沈传年. 区块链跨链技术研究综述[J]. 物联网学报, 2022, 6(4): 183-196.
[10]	张在琛, 尤肖虎, 党建, 吴亮, 朱秉诚, 陈绩, 汪磊. 无线光通信与物联网[J]. 物联网学报, 2022, 6(3): 1-13.
[11]	黄诺, 刘伟杰, 龚晨. 面向工业物联网的拍赫兹通信[J]. 物联网学报, 2022, 6(3): 37-46.
[12]	孙君, 赵尚维康. 工业物联网中基于Sarsa算法的节能计算卸载方案[J]. 物联网学报, 2022, 6(3): 82-90.
[13]	刘杨, 李崔灿, 彭木根. 低功耗水下物联网：愿景与关键技术[J]. 物联网学报, 2022, 6(2): 1-9.
[14]	杨靖, 谢金凤, 陈怡. 我国智慧城市场景中物联网终端评测与认证体系研究[J]. 物联网学报, 2022, 6(2): 26-37.
[15]	李养群, 张登银. 物品万维网资源管理框架研究与应用[J]. 物联网学报, 2022, 6(2): 50-64.

Policy.json
{“AS” ：{“_userId”:”“_user1”,”role”:”owner”,”PK”:
“PK_owner”},
“AO”:{“dataId”:”R0001”,”signer”:”user1”,”
sign_data”:Hash(Data_Pub),
“_resourceKey”:”Key_resource”,”Ipfs”:”http://10.10.39.70”},
“AP”:{auth_sign”:Sign(SK_owner,AS._userId+AP.p_data),”p_Ipfs”:1,”
p_data”:1},
“AE”:{“createTime”:2178728，“endTime”:3178728,
“address”:”10.10.39.70”,”sign_PK_user”:Sign(SK_owner,AS.PK)}}

resource.json
{”_resourceId”:”user1_R0001”,”data”:”Data_pri”,”Ipfs”:”
Data_Ipfs”}