基于信任度的物联网访问控制模型研究  

Research on IoT access control model based on trust degree

作　　者：邓三军 袁凌云 孙丽梅[2] DENG San-jun;YUAN Ling-yun;SUN Li-mei(Key Labory of Educational Informatization for Nationalities of Ministry of Education,Yunnan Normal University,Kunming 650500,China;School of Information,Yunnan Normal University,Kunming 650500,China)

机构地区：[1]云南师范大学民族教育信息化教育部重点实验室,云南昆明650500 [2]云南师范大学信息学院,云南昆明650500

出　　处：《计算机工程与设计》2022年第11期3030-3036,共7页Computer Engineering and Design

基　　金：国家自然科学基金项目(61561055);云南省基础研究专项-面上基金项目(202101AT070098);云南省万人计划青年拔尖人才基金项目。

摘　　要：针对物联网海量数据的安全访问中传统基于角色的访问控制模型不能对用户访问权限进行动态调整以及对访问权限划分粒度不够细的问题。提出了一种基于用户信任度属性的访问控制模型(TA-RBAC),在基于角色的访问控制模型中引入用户信任度分析,建立用户属性集,通过用户信任度值变化动态调整用户的访问权限。并利用区块链存储访问控制策略等关键数据,以此保证策略信息的安全性。实验结果表明,该方案切实可行,能够在实现对用户访问权限动态控制的同时提高网络性能。In view of the problem that the traditional role-based access control model cannot dynamically adjust user access rights and the granularity of access rights is not fine enough in the secure access to the massive data of the Internet of Things.Proposes an access control model based on user trust and attributes(TA-RBAC),introduces user trust analysis into the role-based access control model,establishes user attribute sets,and dynamically adjusts user access rights through changes in user trust values.And use the blockchain to store key data such as access control policies to ensure the security of policy information.Experimental results show that the scheme is feasible and can improve network performance while realizing dynamic control of user access rights.

关 键 词：物联网 信任度 访问控制 区块链 属性 智能合约 动态授权 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]