联盟链环境下物联网轻量级网关研究

Research on Lightweight Gateway of IoT in ConsortiumChain Environment

区块链的分布式和去中心化特性能够有效应对传统物联网架构所面临的设备安全和数据安全挑战。网关作为区块链与物联网融合的关键节点,在融合应用中面临算力、存储资源受限的实际困难,亟需可用的轻量级设计与实现方案。针对这一问题,设计并实现了一种基于联盟链的轻量级区块链-物联网网关原型。首先,基于长安链SPV(Simplified Payment Verification)框架,在网关中实现了关键数据的上链存证与交易数据的过滤精简;其次,从感知设备的行为模式、感知数据两方面进行模式提取与异常识别,保证设备的接入安全和运行安全;最后,针对网关轻节点所存储的区块链默克尔树,提出了一种剪枝算法,加速本组织相关交易数据的验证过程。实验结果表明,设计的轻量级网关具备设备身份可信认证和运行时异常行为检测的可行性,与其它方法相比,默克尔树剪枝优化算法能够大幅度降低交易验证时延。

The distributed and decentralized nature of blockchain technology can effectively address the security challenges faced by traditional Internet of Things(IoT)architectures in terms of device and data security.As a key node in the integration of blockchain and IoT,the gateway faces practical difficulties such as limited computing power and storage resources,requiring lightweight design and implementation solutions.In this paper,a blockchain-based lightweight IoT gateway prototype was designed and implemented to address this problem.Firstly,the key data of the link certificate and transaction are filtered and simplified in the gateway based on ChainMaker SPV(Simplified Payment Verification)framework.Secondly,pattern extraction and anomaly detection were carried out from both the behavior patterns of the perception device and the perception data,ensuring device access security and operational safety.Finally,a pruning algorithm was proposed for the Merkle tree stored on the gateway's lightweight node to speed up the verification process for relevant transaction data in the organization.Experimental results show that the designed lightweight gateway has the feasibility of device identity authentication and runtime abnormal behavior detection,and the proposed Merkle tree pruning optimization algorithm can significantly reduce transaction verification latency compared to other methods.