摘要
区块链的分布式和去中心化特性能够有效应对传统物联网架构所面临的设备安全和数据安全挑战。网关作为区块链与物联网融合的关键节点,在融合应用中面临算力、存储资源受限的实际困难,亟需可用的轻量级设计与实现方案。针对这一问题,设计并实现了一种基于联盟链的轻量级区块链-物联网网关原型。首先,基于长安链SPV(Simplified Payment Verification)框架,在网关中实现了关键数据的上链存证与交易数据的过滤精简;其次,从感知设备的行为模式、感知数据两方面进行模式提取与异常识别,保证设备的接入安全和运行安全;最后,针对网关轻节点所存储的区块链默克尔树,提出了一种剪枝算法,加速本组织相关交易数据的验证过程。实验结果表明,设计的轻量级网关具备设备身份可信认证和运行时异常行为检测的可行性,与其它方法相比,默克尔树剪枝优化算法能够大幅度降低交易验证时延。
The distributed and decentralized nature of blockchain technology can effectively address the security challenges faced by traditional Internet of Things(IoT)architectures in terms of device and data security.As a key node in the integration of blockchain and IoT,the gateway faces practical difficulties such as limited computing power and storage resources,requiring lightweight design and implementation solutions.In this paper,a blockchain-based lightweight IoT gateway prototype was designed and implemented to address this problem.Firstly,the key data of the link certificate and transaction are filtered and simplified in the gateway based on ChainMaker SPV(Simplified Payment Verification)framework.Secondly,pattern extraction and anomaly detection were carried out from both the behavior patterns of the perception device and the perception data,ensuring device access security and operational safety.Finally,a pruning algorithm was proposed for the Merkle tree stored on the gateway's lightweight node to speed up the verification process for relevant transaction data in the organization.Experimental results show that the designed lightweight gateway has the feasibility of device identity authentication and runtime abnormal behavior detection,and the proposed Merkle tree pruning optimization algorithm can significantly reduce transaction verification latency compared to other methods.
作者
冯春波
阿不都热衣木江·阿白
葛翔
王轶
程力
FENG Chun-bo;ABDUREYIM Abai;GE Xiang;WANG Yi;CHENG Li(The Xinjiang Technical Institute of Physics&Chemistry,Chinese Academy of Sciences,Urumqi 830011,China;University of Chinese Academy of Sciences,Beijing 100049,China;Xinjiang Laboratory of Minority Speech and Language Information Processing,Urumqi 830011,China;Information Center of Xinjiang Uygur Autonomous Region,Urumqi 830011,China;Electric Power Research Institute and the Marketing Service Center,State Grid Xinjiang Electric Power Co,Urumqi 830011,China;Hubei University,Wuhan 430000,China)
出处
《计算机技术与发展》
2023年第12期128-135,共8页
Computer Technology and Development
基金
新疆维吾尔自治区重点研发计划项目(2022B01005-1)
丝绸之路经济带创新驱动发展试验区、乌昌石国家自出创新示范区科技发展计划项目(2022LQ03003)
新疆网信科创课题研究(12221604)
中国科学院青年创新促进会项目(2021434)。
关键词
区块链
物联网
网关
轻量级节点
数据上链
身份认证
blockchain
internet of things
gateway
lightweight node
data on-chain
identity authentication