面向边缘节点的分布式可信系统研究

Research on Distributed Authentication of an Edge Computing System

随着物联网和5G的兴起,许多数据密集型的应用也随之发展了起来,如VR,高清视频。物联网终端之间的信息不互通且设备的数据安全性是一个亟待解决的问题。同时,针对移动物联网用户,基站往往会出现数据供应不及时,定位不准确等问题。由此,本文提出了一种基于区块链和边缘计算的分布式可信认证系统,旨在提高物联网终端节点的认证效率以及网络边缘数据的卸载效率。本系统由物理网络层,区块链边缘层和区块链网络层组成。通过区块链网络,设计优化了拜占庭容错共识算法,构建用于存储可信数据和日志的联盟链。此外,物联网边缘节点提供基于智能合约的域名解析和可信认证服务。同时,设计了一种非对称加密方法,以防止节点和终端之间通信时受到非法攻击。我们提出的认证机制是在通信和计算成本方面进行评估的。仿真结果表明,节点认证的时间被控制在一定时间内,本系统可广泛应用于基于不同形式的边缘计算网络,提供安全可靠的边缘缓存卸载服务。

With the development of the Internet of Things and 5G, many data-intensive applications have ap-peared, such as VR and high-definition video. The information between the terminals of the Internet of Things is not interoperable and the data security of the equipment is an urgent problem to be solved. Therefore, this paper proposes a distributed trusted authentication system based on block-chain and edge computing, which aims to improve the authentication efficiency of IoT terminal nodes and the offloading efficiency of network edge data. This system consists of a physical network layer, a blockchain edge layer and a blockchain network layer. Through the blockchain network, the Byzantine fault-tolerant consensus algorithm was designed and optimized, and a consortium chain for storing trusted data and logs was constructed. Simulation results show that the time for node authentication is controlled within a certain period of time. By deploying UAVs to assist edge node caching, this system can be widely used in edge computing networks based on different forms to provide safe and reliable edge caching offloading services.