摘要
矿山物联网规模大和海量数据传输的特点使得传统的网络安全和隐私防护方法无法保障关键数据的可溯源性和可信度。分析认为目前矿山物联网面临的主要安全风险是缺少数据传输可追溯性和可信性保障机制、缺少系统设备全面的签名验签保障机制、系统架构中缺少安全载体部署。指出区块链技术可解决上述问题,介绍了矿山物联网区块链结构、加密算法、共识机制等关键技术。提出了矿山物联网区块链机制:在矿山物联网感知层与传输层之间增加具备边缘算力的边缘层,部署承载区块链核心功能的安全载体,构建矿山物联网区块链部署架构;设计了矿山物联网区块链机制下的数据传输流程,采用非对称加密技术保证数据传输的安全性;在矿山物联网应用层采用数据链管理平台实现关键数据上链、数据溯源、分布式存证等功能。矿山物联网区块链机制可提高矿山物联网的信息安全保障能力和安全等级,使其满足GB/T 22239−2019《信息安全技术网络安全等级保护基本要求》中的扩展要求,降低对集中化运维的需求。
The mine Internet of things has the characteristics of large-scale and massive data transmission.These characteristics make the traditional network security and privacy protection methods unable to guarantee the traceability and reliability of key data.The main security risks of mine Internet of things are lack of data transmission traceability and credibility guarantee mechanism,lack of comprehensive signature verification guarantee mechanism of system equipment,and lack of security carrier deployment in system architecture.It is pointed out that blockchain technology can solve the above problems.The key technologies such as blockchain structure,encryption algorithm and consensus mechanism of mine Internet of things are introduced.This paper proposes a blockchain mechanism of mine Internet of things.The edge layer with edge computing power is added between the perception layer and the transmission layer of the mine Internet of things.The security carrier carrying the core functions of the blockchain is deployed.Thus the deployment architecture of the mine Internet of things blockchain is built.The data transmission process under the blockchain mechanism of the mine Internet of things is designed.The asymmetric encryption technology is adopted to ensure the security of data transmission.In the application layer of the Internet of things in mines,the data chain management platform is adopted to realize the functions of key data uplink,data traceability and distributed certificate storage.The blockchain mechanism of mine Internet of things can improve the information security guarantee capability and security level of mine Internet of things.The mechanism can make mine Internet of things to meet the expansion requirements in GB/T 22239-2019 Information security technology-Baseline for classified protection of cybersecurity,and reduce the demand for centralized operation and maintenance.
作者
张立亚
李晨鑫
刘斌
姜玉峰
ZHANG Liya;LI Chenxin;LIU Bin;JIANG Yufeng(CCTEG China Coal Research Institute,Beijing 100013,China;Shuangma No.1 Coal Mine,CHN Energy Ningxia Coal Industry Co.,Ltd.,Yinchuan 750000,China)
出处
《工矿自动化》
北大核心
2022年第8期10-15,共6页
Journal Of Mine Automation
基金
天地科技股份有限公司科技创新创业资金专项项目(2022-2-TD-ZD001,2022-TD-ZD001)。
关键词
矿山物联网
网络安全
区块链
边缘计算
安全载体
数据溯源
mine Internet of things
network security
blockchain
edge computing
security carrier
data traceability