基于区块链的能源数据共享访问控制方案  

Energy Data Sharing Access Control Model Based on Blockchain

作　　者：余晗 李俊妮 刘文思 宣东海 Yu Han;Li Junni;Liu Wensi;Xuan Donghai(Big Data Center of State Grid Corporation of China,Beijing 100052)

机构地区：[1]国家电网有限公司大数据中心,北京100052

出　　处：《信息安全研究》2023年第3期220-227,共8页Journal of Information Security Research

基　　金：国家电网有限公司总部管理科技项目(5700-202290184A-1-1-ZN)。

摘　　要：针对传统的能源数据共享模型中存在的能源企业部门间访问控制中心化、访问透明度低和效率低等问题,提出一种基于区块链的能源数据共享访问控制方案.首先,设计了基于区块链和能源数据分级的访问控制模型,以零信任的“永不信任,始终验证”为原则,将区块链与基于属性的访问控制(attribute-based access control,ABAC)相结合,利用区块链智能合约保证访问控制自动可信的判决,利用ABAC实现以属性为决定因素的细粒度访问控制;其次,对能源数据进行分级,体现其资源的隐私程度,设计相应的访问控制策略.实验结果表明,该方案能够保证在大规模访问控制策略下,能源数据实现可控共享.Aiming at the problems of centralization,low transparency and low efficiency of interdepartmental access control in the traditional energy data sharing model,a blockchain-based hierarchical access control scheme for energy data sharing is proposed.Firstly,an Access Control model based on blockchain and energy data classification is designed.Based on the principle of“never trust,always verify”with zero-trust,blockchain is combined with Attribute-Based access control(ABAC).The smart contract of blockchain is used to guarantee the automatic and credible decision of access control,and the fine-grained access control with attribute as the determining factor is realized by ABAC.Secondly,the energy data is classified to reflect the privacy degree of its resources,and the corresponding access control strategy is designed.The final experimental results show that the scheme can ensure the controllable sharing of energy data under the largescale access control strategy.

关 键 词：零信任 区块链 数据共享 访问控制 能源数据分级 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]