基于区块链的物联网访问控制框架

Blockchain-based access control framework for Internet of things

物联网(IoT)中入网设备的海量性、动态性和设备轻量级是内在联系并同时存在的特征。为了同时满足上述三个特征,提出一种基于区块链的IoT访问控制(BBIAC)框架。首先提出了该框架下的BBIAC模型,在IoT授权过程中引入属性的概念以满足模型对海量性的支持;而区块链自身的分布式结构和身份认证方式为该模型提供了动态性的支持;同时,区块链自身提供的安全性和多机构信任使BBIAC模型可以将需要大规模计算和存储的部分部署在区块链中,使该模型支持轻量级的IoT设备。接着,介绍了BBIAC模型完整的工作流程。然后,通过着色Perti网(CPN)对BBIAC模型进行形式化的安全性评估,证明了BBIAC模型的安全性。实验结果表明,BBIAC适用于具有海量性、动态性和设备轻量级特征的IoT环境。

The characteristics of massiveness,dynamics,and lightweight devices for network devices in the Internet of Things(IoT)are inherently connected and exist simultaneously.To satisfy these three characteristics simultaneously,a Blockchain-Based IoT Access Control(BBIAC)framework was proposed.Firstly,the BBIAC model under this framework was proposed,the concept of attribute was introduced into the process of IoT authorization to realize the model’s support for massiveness;the distributed structure and identity authentication method of blockchain provide the support of dynamics for the model.Secondly,the complete workflow of BBIAC model was introduced.Thirdly,the formal safety assessment of BBIAC was performed by Colored Petri Network(CPN),and the security of the BBIAC model was proved.Experimental results show that BBIAC is suitable for IoT environments with characteristics of massiveness,dynamics and lightweight devices.