改进的物联网感知层访问控制策略

An improved access control strategy for perceptual layer of IoT

针对当前物联网感知层中海量终端节点访问控制策略可适应性以及运行效率的不足,提出一种高效的访问控制策略。一方面,该策略采用基于属性的访问控制(ABAC)机制,规范了ABAC形式化定义,给出了物联网感知层下的访问控制策略框架,实现了更加细粒度的授权;另一方面,该策略采用了一种改进的密文策略基于属性加密(CP-ABE)算法,引入了析取范式结构,用DNF树替代传统CP-ABE算法中AND/OR访问树结构,有效地简化了计算,提高了系统运行效率。通过实验分析,该策略相比传统的访问控制方法减少了系统的时间开销,在物联网环境下更具适应性和优越性。

Due to the massive terminal nodes in the Internet of Things （IoT）,the traditional access control strategies confront challenges in improving adaptability and efficiency. Therefore, we present an efficient access control strategy. Based on ABAC mechanism, we formalize the formal definition of ABAC,and design an access control frame for the perceptual layer of loT, which achieves a more fine- grained authorization. Moreover,we introduce a disjunctive normal form structure by using an improved CP-ABE algorithm to replace the access tree structure in the traditional CP-ABE algorithm, which effec- tively simplifies the calculation and improves the efficiency of the system. Evaluation experiments demon- strate that the proposed access control strategy reduces the time cost of the system, and has better a- daptability and superiority in the IoT environment than the traditional strategies.