基于区块链的细粒度物联网访问控制模型  

Fine-grained attributes-based access control using blockchain for internet of things

作　　者：宋丽华[1,3] 朱宗科 李梦晨 郭艳飞 马礼 SONG Li-hua;ZHU Zong-ke;LI Meng-chen;GUO Yan-fei;MA-li(College of Information,North China University of Technology,Beijing 100043,China;ChemChina Petrochemical Co.,Ltd.,Beijing 100080,China;Department of Computer Science,The George Washington University,Washington DC 20052,USA)

机构地区：[1]北方工业大学信息学院,北京100043 [2]中国化工油气股份有限公司,北京100080 [3]治华盛顿大学计算机科学系,华盛顿特区20052

出　　处：《计算机工程与设计》2022年第2期352-360,共9页Computer Engineering and Design

基　　金：国家重点研发计划基金项目(2018YFB1800302);北京自然科学基金项目(KZ201810009011、4202020、19L2021)。

摘　　要：基于已有的区块链和访问控制相结合相关的研究存在难管理访问权限、低效率、难支持轻量级物联网设备的缺点,提出一种基于属性的物联网访问控制模型。通过引入属性的概念,支持细粒度的访问控制;将访问控制策略以智能合约部署在区块链上,降低物联网设备的计算压力,使该策略可以应用于轻量级设备;引入token概念,通过访问主体提前申请访问权限,提高访问效率。搭建原型系统,通过案例分析和安全性分析,验证了该访问控制模型的有效性。Since existing research on the combination of blockchain and access control has the shortcomings of inefficiency and difficulties to manage access rights and to support lightweight IoT devices,an attribute-based access control model was proposed for the internet of things.Fine-grained access control was supported by adopting the idea of attributes.The computing pressure on IoT devices was reduced by deploying the access control strategy on the blockchain in the form of smart contracts,so that the strategy could be applied to lightweight IoT devices.The idea of token in the strategy was adopted,the access subject obtained access permission in advance,which improved the efficiency of access.A prototype system was built to verify the proposed model,through case analysis and security analysis,it shows that this access control model is effective and versatile.

关 键 词：物联网 访问控制 区块链 智能合约 细粒度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]