基于区块链的汽车产业链权限委托方法  

Blockchain-based permission delegation method for automotive industry chain

作　　者：邓良明 李斌勇 邓显辉 Deng Liangming;Li Binyong;Deng Xianhui(School of Cybersecurity(Xin Gu Industrial College),Chengdu University of Information Technology,Chengdu 610225,China;Advanced Cryptography&System Security Key Laboratory of Sichuan Province,Chengdu 610225,China)

机构地区：[1]成都信息工程大学网络空间安全学院(芯谷产业学院),成都610225 [2]先进密码技术与系统安全四川省重点实验室,成都610225

出　　处：《计算机应用研究》2024年第8期2284-2291,共8页Application Research of Computers

基　　金：国家重点研发计划资助项目(2018YFB1701502);四川省科技计划资助项目(2024NSFSC0515,MZGC20230013);成都信息工程大学青年创新(领军)项目(KYQN202212)。

摘　　要：针对汽车产业链资源信息多源异构、跨平台交互建立困难的问题,提出了一种基于区块链的跨域权限委托方法(BCPDM)。该方法首先将区块链技术与基于属性的访问控制(ABAC)模型相结合,并建立权限过滤功能,以避免平台间权限冲突;其次,引入权限收回机制,提高模型授权的灵活性,避免长时间授权可能导致的信息泄露问题,旨在以灵活、动态、高效和可信的方式解决复杂汽车产业链多域环境下的访问授权问题。经安全性分析与实验表明:所提方法在复杂汽车产业链多域环境中能够保证用户的安全访问和各平台之间的数据信息交互,并且计算开销低。该方法能够满足汽车产业链协同交互的实时要求,为解决复杂汽车产业链中的访问控制问题提供了一种可行的解决方案。Aiming at the problems of multi-source heterogeneity of automotive industry chain resource information and the difficulty of establishing cross-platform interaction,this paper proposed a blockchain-based cross-domain permission delegation mode(BCPDM).Firstly,it combined blockchain technology with attribute-based access control(ABAC)model,and established a permission filtering function to avoid inter-platform permission conflicts.Secondly,it introduced a permission retraction mechanism to improve the flexibility of the model authorization and avoid the problem of information leakage that might be caused by prolonged authorization,aiming to solve the access authorization problem under the multidomain environment of complex automotive industry chain in a flexible,dynamic,efficient and trustworthy way.The security analysis and experimental results show that the proposed method can ensure the safe access of users and data and information interaction between platforms in the multi-domain environment of complex automotive industry chain,and the computational overhead is low.The method can meet the real-time requirements of automobile industry chain cooperative interaction,and provides a feasible solution for solving the access control problem in complex automobile industry chain.

关 键 词：汽车产业链 跨域访问 区块链 权限委托 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]