基于智能合约和企业信用的访问控制模型  

Access Control Model Based on Smart Contract and Enterprise Credit

作　　者：安洋 李坤 李军怀[1] 王怀军[1] 臧东玲 AN Yang;LI Kun;LI Jun-Huai;WANG Huai-Jun;ZANG Dong-Ling(Faculty of Computer Science and Engineering,Xi’an University of Technology,Xi’an 710048,China;China Qiyuan Engineering Corporation,Xi’an 710018,China)

机构地区：[1]西安理工大学计算机科学与工程学院,西安710048 [2]中国启源工程设计研究院有限公司,西安710018

出　　处：《计算机系统应用》2022年第3期197-202,共6页Computer Systems & Applications

基　　金：陕西省科技计划(2018HJCG-05)。

摘　　要：传统供应链服务的发展面临诸多痛点,包括造假风险、企业信息孤岛、核心企业信用不能跨级传递、违约风险高等.针对供应链企业信息孤岛以及非法用户对网络资源的非授权访问等问题,本文提出了一种基于智能合约和企业信用的访问控制模型,用以保障果品质量溯源系统的数据安全性和完整性.该模型将RBAC和ABAC相结合,以智能合约作为底层技术,引入企业信用值作为跨域访问的参考属性,利用主体属性与信用值作为决策依据实现域内与域间的访问控制.实验结果表明了本文提出的访问控制模型的有效性.The development of traditional supply chain services faces many pain points, including forgery risk, enterprise information silo, failure to the cross-level transmission of core enterprise credit, and default risk. To tackle the problems of information silos of supply chain enterprises and unauthorized access to network resources by illegal users, this study proposes an access control model based on smart contracts and enterprise credit to guarantee the data security and integrity of fruit quality traceability system. Combining role-based access control(RBAC) and attribute-based access control(ABAC), the model takes smart contracts as the underlying technology, enterprise credit values as reference attributes for cross-domain access, and subject attributes and credit values as decision bases to realize intra-and interdomain access control. The experimental results show the effectiveness of the access control model proposed in this study.

关 键 词：区块链 溯源 智能合约 企业信用 访问控制 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]