一种基于区块链的域间访问控制模型  

Inter-domain Access Control Model Based on Blockchain

作　　者：张建标 张兆乾[1,2] 徐万山 吴娜 ZHANG Jian-Biao;ZHANG Zhao-Qian;XU Wan-Shan;WU Na(Faculty of InformationTechnology,Beijing University of Technology,Beijing 100124,China;Beijing Key Laboratory of Trusted Computing(Beijing University of Technology),Beijing 100124,China)

机构地区：[1]北京工业大学信息学部,北京100124 [2]可信计算北京市重点实验室(北京工业大学),北京100124

出　　处：《软件学报》2021年第5期1547-1564,共18页Journal of Software

基　　金：北京市自然科学基金(M21039);北京工业大学国际种子基金(2018A01)。

摘　　要：云计算、物联网和移动互联网等新型计算模式的出现,使得域间相互访问以及数据共享的需求不断扩大,而目前“中心化”的传统访问控制技术所显现出的访问控制策略执行不透明、动态数据管理不灵活、资源拥有者自主性差,使其难以满足海量、动态和分布的新型计算模式.提出了一种以ABAC模型为基础、以区块链为交互方式的域间访问控制模型.介绍了ABAC模型和区块链的技术原理、特点、研究现状,详细阐述了模型框架,对ABAC模型进行了形式化定义;同时,对模型中的智能合约进行了具体描述,给出了本模型在具体场景中的应用和具体的访问控制流程;最后对比了现有的研究方案.该模型可以为域间访问提供标准化的安全、便捷、自主且细粒度的访问控制.The emergence of new computing paradigms such as cloud computing,the Internet of Things,and the mobile Internet has increased the need for inter-domain access and data sharing,while at present the“centralized”traditional access control technology have showed opaque of access control policy execution,inflexibility of dynamic data management,low-autonomy of resource owners,these shortcomings make it difficult to satisfy the requirements of access control for new computing paradigms with massive,dynamic,and distributed features,an inter-domain access control model based on ABAC model and blockchain interaction is proposed.This paper introduces the technical principle,characteristics and research status of the ABAC model and blockchain,elaborates the model framework,defines the definition of the ABAC model.At the same time,the smart contract in the model is described in detail,and the application in the specific scenario and the specific access control flow are given.Finally,compared with the existing research solution,this model can provide standardized security,convenient,autonomous,and fine-grained access control for inter-domain access.

关 键 词：区块链 ABAC 跨域 访问控制 数据共享 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]