基于联盟链的细粒度安全访问控制机制

Fine Grained Security Access Control Mechanism Based on Blockchain

针对工业物联网存在数据规模庞大、访问安全性差以及隐私安全的问题,提出了基于联盟区块链并使用零知识令牌返回授权的安全访问控制机制,同时,应用IPFS星际文件系统进行链下存储以拓展区块链的可存储性。通过Hyperledger Fabric平台部署区块链网络并编写智能合约,定义访问过程的形式化表达,以更细粒度的模式实现本地和全局的访问授权,并对访问控制的模型和流程进行详细的阐述。最后,通过实验说明区块链网络对访问授权的延迟情况以及策略生成的平均延迟情况,并对比分析了模型的安全性和有效性。结果表明,所提机制在物联网访问控制方面具有安全性、有效性和低延迟性。

To solve the problems of huge data scale,poor access security and privacy security in industrial IoT,a data security access control mechanism based on blockchain combined with zero-knowledge token is proposed,while IPFS interstellar file system is applied for off-chain storage to expand the storability of blockchain.A blockchain network is built and smart contracts are deployed through the Hyperledger Fabric platform to define a formal representation of the access process to achieve local and global access authorization in a more fine-grained model,while the model and process of access control are elaborated.Finally,the security and effectiveness of the model are compared and analyzed,and the latency of the blockchain network for access authorization is illustrated through experiments.The results show that the proposed mechanism has security,effectiveness and low latency in IoT access control.