一种用于物联网的基于区块链的访问控制框架

A blockchain⁃based access control framework for Internet of Things

分布式物联网由于自身特性的要求,需要具备可扩展性和一定的容错能力,但这在集中式系统中难以实现。受加密货币交易原理的启发,利用区块链技术构建一种新的访问控制框架,既不需要一个集中实体来承担访问控制授权功能,又能让用户自己掌握访问控制的细粒度。新框架的提出主要依赖于区块链技术能够很好地解决如何让分散的匿名参与者达成共识的问题,由此才能对访问控制的授权进行分布式管理。区块链技术的其他特点又进一步保证了新框架的安全性。对比在分布式物联网中提出的或正在使用的访问控制框架,新框架降低了对设备算力的要求,避免了复杂的安全设置,实现了去中心化的访问控制。

The distributed IoT requires scalability and certain fault tolerance due to its own characteristics,but this is difficult to achieve in centralized systems.Inspired by the principles of cryptocurrency transactions,the blockchain technology is used to build a new access control framework that does not require a centralized entity to undertake access control authorization functions,but allows users to master the fine⁃grained access control by themselves.The proposal of the new framework mainly relies on the fact that blockchain technology can solve the problem of how to make decentralized anonymous participants reach consensus.This enables distributed management of the authorization of access control.Other features of blockchain technology further ensure the security of the new framework.In comparison with the access control framework proposed or being used in the distributed IoT,the new framework reduces the requirements for device computing power,avoids complex security settings,and realizes decentralized access control.