基于区块链的智能家居认证与访问控制方案  

Authentication and access control scheme for smart home based on blockchain

作　　者：张利华 张赣哲 曹宇 刘季 陈世宏 Zhang Lihua;Zhang Ganzhe;Cao YuLiu Ji;Chen Shihong(School of Software,East China Jiaotong University,Nanchang 330013,China;School of Electrical&Automation Engineering,East China Jiaotong University,Nanchang 330013,China)

机构地区：[1]华东交通大学软件学院,南昌330013 [2]华东交通大学电气与自动化工程学院,南昌330013

出　　处：《计算机应用研究》2022年第3期863-867,873,共6页Application Research of Computers

基　　金：国家自然科学基金资助项目(61563016);江西省教育厅科技项目基金资助项目(GJJ14371)。

摘　　要：智能家居运用物联网技术为用户提供自动化的智能服务,但传统的集中式架构存在机密性和完整性等安全性问题,而现有的分布式架构又存在重复认证、高延迟等问题。针对这些问题,基于区块链和椭圆曲线集成加密技术提出了一种智能家居认证与访问控制方案,同时还引入了边缘计算,降低系统的延迟。并将基于权能的访问控制与区块链相结合,在区块链上存储权能令牌并设计了相应的智能合约以实现安全的访问控制。安全性分析表明,该方案具有去中心化、不可窜改、机密性、完整性和可扩展性等安全特性。在以太坊区块链上进行仿真,并根据计算开销、通信开销和响应时间等指标对方案进行了性能评估。评估结果表明,相比其他方案,该方案计算开销和通信开销更小,响应时间更短,具有明显的优势。Smart home uses Internet of Things technology to provide users with automatic intelligent services, but the traditional centralized architectures have security problems such as confidentiality and integrity, while the existing distributed architectures have problems such as repeated authentication and high latency. To solve these problems, based on blockchain and elliptic curve integrated encryption technology, this paper proposed a smart home authentication and access control scheme. At the same time, it introduced edge computing to reduce the delay of the system. It also combined the capability based access control with the blockchain, stored the capability token on the blockchain, and designed the corresponding smart contract to achieve secure access control. Security analysis showed that the scheme had the security characteristics of decentralization, tamper proof, confidentiality, integrity and scalability. Simulated experiment was carried out on Ethereum blockchain, and the performance of the scheme was evaluated according to computing overhead, communication overhead and response time. The evaluation results show that compared with other schemes, this scheme has less computational and communication overhead and shorter response time, has obvious advantages.

关 键 词：智能家居 认证 访问控制 区块链 椭圆曲线 边缘计算 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]