物联网环境下基于区块链技术的私有数据访问控制模型

doi:10.11959/j.issn.2096-3750.2022.00304

Abstract

Abstract:

The traditional “centralized” access control technology can no longer guarantee the security of private data access control in the current internet of things environment.Based on the ABAC (attribute-based access control) model, a blockchain based access control framework for the internet of things and a private data access control model were proposed.Firstly, the basic framework and process of access control were described and analyzed in detail, and an auditable access control model was proposed to systematically manage the access control policies of private data through the requests, responses and access records stored in the blockchain network.Then, an auditable access control system based on blockchain technology was proposed, which can provide distributed, fine-grained and dynamic access control management in the internet of things, realize the effective management and auditable access to data, and adopt the access control method based on smart contract to realize the transparent, traceable and automatic access control over the internet of things resources.Finally, simulation experiments and performance tests verify the effectiveness and security of the access control model and system.

Key words: blockchain, IoT, access control, smart contract, data security

CLC Number:

TP309

Weijin JIANG, Tiantian LUO, Ying YANG, En LI, Wenying ZHOU. Private data access control model based on block chain technology in the internet of things environment[J]. Chinese Journal on Internet of Things, 2022, 6(4): 169-182.

Figures/Tables 14

References 13

[14]	ZYSKIND G , NATHAN O , PENTLAND A . Decentralizing privacy:using blockchain to protect personal data[C]// Proceedings of 2015 IEEE Security and Privacy Workshops. Piscataway:IEEE Press, 2015: 180-184.
[15]	KO??áL K , HELEBRANDT P , BELLU? M , ,et al. Management and monitoring of IoT devices using blockchain[J]. Sensors (Basel,Switzerland), 2019,19(4): 856.
[16]	DING S , CAO J , LI C ,et al. A novel attribute-based access control scheme using blockchain for IoT[J]. IEEE Access, 2019(7): 38431-38441.
[17]	ZHOU L , WANG L , AI T ,et al. BeeKeeper 2.0:confidential blockchain-enabled IoT system with fully homomorphic computation[J]. Sensors (Basel,Switzerland), 2018,18(11): E3785.
[18]	HENRY R , HERZBERG A , KATE A . Blockchain access privacy:challenges and directions[J]. IEEE Security ＆ Privacy, 2018,16(4): 38-45.
[19]	CAI Z P , ZHENG X . A private and efficient mechanism for data uploading in smart cyber-physical systems[J]. IEEE Transactions on Network Science and Engineering, 2020,7(2): 766-775.
[20]	KUZMIN A , . Blockchain-based structures for a secure and operate IoT[C]// Proceedings of 2017 Internet of Things Business Models,Users,and Networks. Piscataway:IEEE Press, 2017: 1-7.
[21]	ZHANG Y Y , KASAHARA S , SHEN Y L ,et al. Smart contract-based access control for the internet of things[J]. IEEE Internet of Things Journal, 2019,6(2): 1594-1605.
[22]	PAL S , RABEHAJA T , HITCHENS M ,et al. On the design of a flexible delegation model for the internet of things using blockchain[J]. IEEE Transactions on Industrial Informatics, 2020,16(5): 3521-3530.
[23]	SONG L H , LI M C , ZHU Z K ,et al. Attribute-based access control using smart contracts for the internet of things[J]. Procedia Computer Science, 2020,174: 231-242.
[24]	SAINI A , ZHU Q Y , SINGH N ,et al. A smart-contract-based access control framework for cloud smart healthcare system[J]. IEEE Internet of Things Journal, 2021,8(7): 5914-5925.
[25]	YANG W T , GUAN Z T , WU L F ,et al. Secure data access control with fair accountability in smart grid data sharing:an edge blockchain approach[J]. IEEE Internet of Things Journal, 2021,8(10): 8632-8643.
[1]	LIU H , HAN D Z , LI D . Fabric-IoT:a blockchain-based access control system in IoT[J]. IEEE Access, 2020(8): 18207-18218.
[2]	BABUN L , DENNEY K , CELIK Z B ,et al. A survey on IoT platforms:communication,security,and privacy perspectives[J]. Computer Networks, 2021,192:108040.
[3]	YANG Y S , ZHONG M S , YAO H Q ,et al. Internet of things for smart ports:technologies and challenges[J]. IEEE Instrumentation ＆ Measurement Magazine, 2018,21(1): 34-43.
[4]	史锦山, 李茹 . 物联网下的区块链访问控制综述[J]. 软件学报, 2019,30(6): 1632-1648.
	SHIJ S , LI R . Survey of blockchain access control in Internet of Things[J]. Journal of Software, 2019,30(6): 1632-1648.
[5]	HU V C , KUHN D R , FERRAIOLO D F ,et al. Attribute-based access control[J]. Computer, 2015,48(2): 85-88.
[6]	ZENG S A , HUO R , HUANG T ,et al. Survey of blockchain:principle,progress and application[J]. Journal on Communications. 2020,41(01): 134-151.
[7]	田国华, 胡云瀚, 陈晓峰 . 区块链系统攻击与防御技术研究进展[J]. 软件学报, 2021,32(5): 1495-1525.
	TIAN G H , HU Y H , CHEN X F . Research progress on attack and defense techniques in block-chain system[J]. Journal of Software, 2021,32(5): 1495-1525.
[8]	房梁, 殷丽华, 郭云川 ,等. 基于属性的访问控制关键技术研究综述[J]. 计算机学报, 2017,40(7): 1680-1698.
	FANG L , YIN L H , GUO Y C ,et al. A survey of key technologies in attribute-based access control scheme[J]. Chinese Journal of Computers, 2017(7): 1680-1698.
[9]	SUDARSAN S V , SCHELéN O , BODIN U . Survey on delegated and self-contained authorization techniques in CPS and IoT[J]. IEEE Access, 2021(9): 98169-98184.
[10]	BELIM S , BELIM S . Implementation of mandatory access control in distributed systems[J]. Automatic Control and Computer Sciences, 2018,52(8): 1124-1126.
[11]	KAMBOJ P , KHARE S , PAL S . User authentication using Blockchain based smart contract in role-based access control[J]. Peer-to-Peer Networking and Applications, 2021,14(5): 2961-2976.
[12]	AGHILI S F , SEDAGHAT M , SINGELéE D , ,et al. MLS-ABAC:efficient multi-level security attribute-based access control scheme[J]. Future Generation Computer Systems, 2022,131: 75-90.
[13]	刘明达, 陈左宁, 拾以娟 ,等. 区块链在数据安全领域的研究进展[J]. 计算机学报, 2021,44(1): 1-27.
[26]	FOTIOU N , PITTARAS I , SIRIS V A ,et al. Secure IoT access at scale using blockchains and smart contracts[C]// Proceedings of 2019 IEEE 20th International Symposium on. Piscataway:IEEE Press, 2019: 1-6.
[13]	LIU M D , CHENZ N , SHIY J ,et al. Research progress of blockchain in data security[J]. Chinese Journal of Computers, 2021,44(1): 1-27.

Metrics

Recommended 0

No Suggested Reading articles found!

对比项	作用	优点	缺点
DAC^[9]	主体对客体的访问权限能够进行自主管理，主体决定是否将客体的全部或部分访问权限授予给其他主体	灵活性较高，也具有一定的可扩展性	安全性较差，开销大，静态分配权限
MAC^[10]	主体和客体都被系统分配一个固定的安全属性，安全属性决定一个主体是否可以访问某个客体	信息的机密性较高，安全性较高	灵活性比较差，静态分配权限
RBAC^[11]	权限和角色相关联，通过为主体分配适当的角色，其能够获得相应角色的权限	明确责任和授权，安全性和灵活性较高	粗粒度控制，静态分配权限

符号	含义
PK_owner/user	数据所有者或数据请求者的公钥
SK_owner/user	数据所有者或数据请求者的私钥
Data_Pri	隐私数据数据包
Data_Pub	公共数据数据包
Data_Ipfs	公共数据的IPFS地址
Key_resource	与数据资源对应的键值
Key_policy	与策略对应的键值
Key_request	与请求记录对应的键值
Key_response	与响应记录对应的键值
Sign( )	ECDSA的签名算法
Verify( )	ECDSA的验证算法
Hash( )	计算哈希值

属性			模型
属性	文献[21]	文献[22]	文献[24]	文献[25]	所提模型
隐私性	×	√	√	×	√
可撤销性	√	×	√	×	√
云存储	×	×	√	√	√
兼容性	×	×	×	√	√
可审计性	×	√	×	×	√
区块链	公有	私有	私有	联盟	联盟

Private data access control model based on block chain technology in the internet of things environment

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 14

References 13

Related Articles 15

Metrics

Recommended 0

[1]	Junge LIANG, Yiran SONG, Yangfan SUN, Yingying JI, Lijia PAN, Yi SHI. Research progress of human health IoT based on wearable and implantable techniques [J]. Chinese Journal on Internet of Things, 2023, 7(2): 26-34.
[2]	Nongyu WEI, Zilong JIANG, Fangjiong CHEN. AODV protocol for acoustic-radio integrated network based on location information and energy balance [J]. Chinese Journal on Internet of Things, 2023, 7(1): 27-36.
[3]	Jing WANG, Lesheng HE, Zhonghong LI, Luchi LI, Hang YANG. Software and hardware co-design of lightweight authenticated ciphers ASCON for the internet of things [J]. Chinese Journal on Internet of Things, 2022, 6(4): 139-148.
[4]	Fangyuan XING, Shibo HE, Mingyang SUN, Jiming CHEN. Carbon emission monitoring based on internet of things with cloud-tube-edge-end structure [J]. Chinese Journal on Internet of Things, 2022, 6(4): 53-64.
[5]	Chuannian SHEN. Review on cross-chain technology research of blockchains [J]. Chinese Journal on Internet of Things, 2022, 6(4): 183-196.
[6]	Jing YANG, Jinfeng XIE, Yi CHEN. A study of testing-index and certification systems of IoT terminals for smart city in China [J]. Chinese Journal on Internet of Things, 2022, 6(2): 26-37.
[7]	Yangqun LI, Dengyin ZHANG. Research and application of Web of things resource management framework [J]. Chinese Journal on Internet of Things, 2022, 6(2): 50-64.
[8]	Dan LUO, Ruzhi XU, Zhitao GUAN. Differential privacy budget optimization based on deep learning in IoT [J]. Chinese Journal on Internet of Things, 2022, 6(2): 65-76.
[9]	Zihui LUO, Chengling JIANG, Liang LIU, Xiaolong ZHENG, Huadong MA. Research on deep reinforcement learning based intelligent shop scheduling method [J]. Chinese Journal on Internet of Things, 2022, 6(1): 53-64.
[10]	Yu JIANG, Siqing CHEN, Wen SUN. Research on LoRa network security schemes based on RF fingerprint [J]. Chinese Journal on Internet of Things, 2021, 5(4): 17-25.
[11]	Minmin MAO, Jiaqi JU, Yuling OUYANG, Yan JIN. Design and implementation of NB-IoT based environmental temperature and humidity monitoring system [J]. Chinese Journal on Internet of Things, 2021, 5(4): 99-106.
[12]	Shiyou GUAN, Zaiqun WU. Design and application of a lightweight management software for Internet of things node [J]. Chinese Journal on Internet of Things, 2021, 5(4): 145-152.
[13]	Mengya LI, Zhengquan LI. A NB-IoT access scheme based on Beta distribution [J]. Chinese Journal on Internet of Things, 2021, 5(3): 70-77.
[14]	Chaojie GU, Rui TAN. LoRaWAN technologies for enabling new generation Internet of things [J]. Chinese Journal on Internet of Things, 2021, 5(2): 18-25.
[15]	Pengliu TAN, Lixuran WAN. A blockchain architecture with master-slave blockchain [J]. Chinese Journal on Internet of Things, 2021, 5(2): 116-124.

Policy.json
{“AS” ：{“_userId”:”“_user1”,”role”:”owner”,”PK”:
“PK_owner”},
“AO”:{“dataId”:”R0001”,”signer”:”user1”,”
sign_data”:Hash(Data_Pub),
“_resourceKey”:”Key_resource”,”Ipfs”:”http://10.10.39.70”},
“AP”:{auth_sign”:Sign(SK_owner,AS._userId+AP.p_data),”p_Ipfs”:1,”
p_data”:1},
“AE”:{“createTime”:2178728，“endTime”:3178728,
“address”:”10.10.39.70”,”sign_PK_user”:Sign(SK_owner,AS.PK)}}

resource.json
{”_resourceId”:”user1_R0001”,”data”:”Data_pri”,”Ipfs”:”
Data_Ipfs”}