物联网感知层一种基于属性的访问控制机制

Attribute-based access control scheme for the perceptive layer of the Internet of Things

为了实现物联网感知层的细粒度访问控制和用户的匿名数据访问,提出了一种基于用户属性的访问控制机制,并利用双线性映射给出了具体的算法实现.该方案中,用户以其属性证书为依据向传感器节点发起数据访问请求,传感器节点根据门限原则决定是否允许用户访问.该方案可以实现灵活的细粒度访问控制和匿名的数据访问,用户和传感器节点的信息交互次数达到了最少,节点运算量少,只需要进行一次公钥加密.与现有的传感器网络访问控制方案相比,该方案传感器节点开销较小,可扩展性良好,可以适应物联网感知层的访问控制需求.

In order to achieve the fine-grained access control and the anonymity of the user access to data in the Internet of Things,an attribute-based access control model is proposed and realized by using the bilinear map.In this scheme,users request data access to the sensor node based on their attributes certificates and the sensor node determines whether to allow access according to the threshold principle.This scheme effectively realizes the flexible fine-graind access control and anonymous access to data.The number of interactions between users and sensor nodes is minimized and the computation of sensor nodes is reduced to one public key encryption.Analysis shows that the scheme has the advantages over the current access control mechanisms of better scalability and lower cost in communication and computation and can adapt to access control requirement of perceptive layer of the Internet of Things.