基于区块链的边缘服务安全机制研究  

Research on Security Mechanism of Edge Service Based on Blockchain

作　　者：李小娟[1] 臧义华[1] 吴楫捷 Li Xiaojuan;Zang Yihua;Wu Jijie(North China Institute of Computing Technology,Beijing 100083;State Key Laboratory of Geoinformation Engineering,Xi’an 710054)

机构地区：[1]华北计算技术研究所,北京100083 [2]地理信息工程国家重点实验室,西安710054

出　　处：《信息安全研究》2022年第6期613-621,共9页Journal of Information Security Research

摘　　要：边缘服务节点具备多样化保障能力,对于末端网络通信、数据采集、信息处理及控制等方面能力提升发挥着重要的作用,针对复杂环境中边缘服务节点易受攻击,安全信息共享手段缺乏的问题,基于DAG数据结构,设计了一个由主链、安全密钥链和业务链组成的安全区块链网络架构,采用硬件私钥存储、链上动态审计、数据安全传输和网络动态调整等多策略安全控制技术,为边缘服务节点建立了完备的安全机制.实验结果表明,提出的多策略安全机制能够确保边缘服务节点设备、数据存储、数据访问、数据传输、数据服务等各方面的安全,为工业互联网的发展奠定安全的基石.Edge service nodes have diversified service capabilities, and play an important role in improving the capability of data acquisition, communication, information awareness, command and control. To solve the problems of lack of security information sharing means and vulnerability of edge service nodes in a complex environment, an endogenous security blockchain network architecture composed of main chain, key chain and data chain is designed based on the DAG data structure in this paper, multi-policy security control techniques such as hardware private key storage, dynamic audit on the chain, data security transmission and network dynamic adjustment are adopted to establish a complete endogenous security mechanism for edge service nodes. Experiments show that the security mechanism in this paper can ensure the security of personnel, device, data storage, data access, data transmission, and data services, and form the basis of security for the industrial Internet.

关 键 词：边缘服务 区块链 密钥链 数据安全 动态审计 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]