物联网环境下基于区块链技术的私有数据访问控制模型

Private data access control model based on block chain technology in the internet of things environment

基于传统“中心化”的访问控制技术已经无法保证当前物联网环境中私有数据访问控制的安全性问题。以基于属性的访问控制(ABAC,attribute-based access control)模型为基础,提出了一种基于区块链的物联网访问控制框架和私有数据访问控制模型。首先,对访问控制的基本框架与流程进行了详细的阐述与分析,并提出了可审计的访问控制模型,通过存储在区块链网络中的请求、响应和访问记录,对私有数据的访问控制策略进行系统管理;接着,提出了一种基于区块链技术的可审计访问控制系统,可以在物联网中提供分布式、细粒度和动态性的访问控制管理,实现了对数据的有效管理和可审计访问,并采用基于智能合约的访问控制方法实现对物联网资源全程透明、可追溯、自动化的访问控制。最后,通过仿真实验和性能测试验证了该访问控制模型和系统的有效性和安全性。

The traditional“centralized”access control technology can no longer guarantee the security of private data access control in the current internet of things environment.Based on the ABAC(attribute-based access control)model,a blockchain based access control framework for the internet of things and a private data access control model were proposed.Firstly,the basic framework and process of access control were described and analyzed in detail,and an auditable access control model was proposed to systematically manage the access control policies of private data through the requests,responses and access records stored in the blockchain network.Then,an auditable access control system based on blockchain technology was proposed,which can provide distributed,fine-grained and dynamic access control management in the internet of things,realize the effective management and auditable access to data,and adopt the access control method based on smart contract to realize the transparent,traceable and automatic access control over the internet of things resources.Finally,simulation experiments and performance tests verify the effectiveness and security of the access control model and system.