基于联盟链的可信工业控制网络访问控制机制  

Trusted access mechanism of industrial control network based on alliance chain

作　　者：石乐义[1] 刘娜[2] 崔雯迪 李晓雨 朱红强 SHI Le-yi;LIU Na;CUI Wen-di;LI Xiao-yu;ZHU Hong-qiang(College of Computer Science and Technology,China University of Petroleum(EastChina),Qingdao 266580,China;College of Oceanography and Space Informatics,China University of Petroleum(East China),Qingdao 266580,Chian)

机构地区：[1]中国石油大学(华东)计算机科学与技术学院,山东青岛266580 [2]中国石油大学(华东)海洋与空间信息学院,山东青岛266580

出　　处：《微电子学与计算机》2020年第11期24-28,34,共6页Microelectronics & Computer

基　　金：国家自然科学基金(61772551);山东省自然科学基金(ZR2019MF034)。

摘　　要：针对工业控制网络高度中心化、数据安全和访问控制等问题,优化基于属性的访问控制模型,引入多维信任度量技术作为访问控制判决因素来解决网络内部节点攻击问题,采用联盟链技术优化工业控制网络模式.解决控制系统中心化的问题.进一步提出了基于联盟链的可信工业控制网络访问控制模型TurstAC-ABAC.采用Lab-VIEW仿真软件和HyperLedger Fabric平台分别实现对工业控制系统和联盟链系统的仿真环境,验证了本文所提出框架的可行性和安全性.Aiming at the problem that is highly centralized,data security and access control of industrial control network,this paper puts forward some solutions,which improve the model of Attribute based access control(ABAC),introduce multi-dimensional trust measurement as access control decision factors to solve the problem of node attack,use the alliance chain technology to optimize industrial control network model and solve the problem of control system centralization.A TurstAC-ABAC model is proposed,which is a highly trusted access control mechanism model of industrial control network based on the alliance chain.The industrial control system and alliance chain system is simulated using LabVIEW and the HyperLedger Fabric platform.The simulation results verify the feasibility and security of the proposed framework.

关 键 词：工业控制网络 联盟链 多维信任度量 访问控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]