基于区块链的工业控制系统数据完整性保护  

Industrial control system data integrity protection based on blockchain

作　　者：孙彦棨 张正道[1,2] SUN Yanqi;ZHANG Zhengdao(College of Internet of Things Engineering,Jiangnan University,Wuxi 214122,China;Engineering Research Center of Internet of Things Applied Technology,Ministry of Education,Jiangnan University,Wuxi 214122,China)

机构地区：[1]江南大学物联网工程学院,江苏无锡214122 [2]江南大学教育部物联网技术应用工程中心,江苏无锡214122

出　　处：《计算机集成制造系统》2022年第9期2909-2917,共9页Computer Integrated Manufacturing Systems

基　　金：国家重点研发计划资助项目(2018YFB1701903)。

摘　　要：区块链具有去中心化、数据不可篡改等优势,在数据安全方面应用广泛。但是,工业控制系统中连接物理设备的现场总线系统计算资源受限、通信能力差导致现有区块链系统难以部署。为此,提出一种轻量化私有区块链方案,以实现现场总线层级的数据完整性保护。首先,设计了一种随机验证机制,随机选择部分节点参与共识过程。节省通信开销的同时增加了攻击的难度。其次,提出一种新型共识模型,其可根据共识节点的状态制定不同的共识策略以减少节点的计算与通信负担。安全分析证明拟议方案不仅可以抵御常见的数据完整性攻击,还能有一定概率抵御51%攻击。仿真表明,与同类方法相比,拟议方案在安全性能、时间成本和通信量成本方面具有显著的优势。Blockchain has the advantages such as decentralization and data immutability,its application in data security is very extensive.However,the fieldbus system that connected physical layer equipment had limited computing resources and poor communication capabilities in an industrial control system.It was difficult to deploy the blockchain on an industrial control system.For this reason,a lightweight private blockchain scheme was proposed to protect the data integrity at the fieldbus level.A random verification mechanism was designed,in which a part of nodes are randomly selected to participate in the consensus process.This mechanism not only saved communication cost,but also enhanced the security of the scheme.A new consensus model was proposed,which could adopt different consensus strategies according to the states of the consensus nodes to reduce the calculation and communication burden of the nodes.Security analysis proved that the proposed scheme had certain probability to against the 51%attack except for common data integrity attacks.Compared with existing schemes,simulation showed that the proposed scheme had significant advantages in terms of security performance,time and communication cost.

关 键 词：区块链 工业控制系统 数据完整性 随机验证机制 共识策略 

分 类 号：TP274[自动化与计算机技术—检测技术与自动化装置] TP393[自动化与计算机技术—控制科学与工程]