基于主侧链合作的区块链访问控制策略

doi:10.19678/j.issn.1000-3428.0062027

计算机工程 ›› 2022, Vol. 48 ›› Issue (3): 10-16,22. doi: 10.19678/j.issn.1000-3428.0062027

基于主侧链合作的区块链访问控制策略

刘晶^1,2,3, 朱炳旭¹, 梁佳杭¹, 任女尔⁵, 季海鹏^2,3,4

1. 河北工业大学人工智能与数据科学学院, 天津 300400;
2. 河北省数据驱动工业智能工程研究中心, 天津 300400;
3. 天津开发区精诺瀚海数据科技有限公司, 天津 300400;
4. 河北工业大学材料科学与工程学院, 天津 300400;
5. 中汽数据(天津)有限公司, 天津 300393

收稿日期:2021-07-09 修回日期:2021-08-31 发布日期:2021-09-07
作者简介:刘晶(1979-),女,研究员、博士,主研方向为区块链;朱炳旭、梁佳杭,硕士研究生;任女尔,硕士;季海鹏(通信作者),副研究员、博士。
基金资助:
天津市人工智能重大专项（19ZXZNGX00040）；河北省自然科学基金面上项目（F2019202062）。

Blockchain Access Control Strategy Based on Mainchain and Sidechain Cooperation

LIU Jing^1,2,3, ZHU Bingxu¹, LIANG Jiahang¹, REN Nüer⁵, JI Haipeng^2,3,4

1. School of Artificial Intelligence and Data Science, Hebei University of Technology, Tianjin 300400, China;
2. Hebei Data Driven Industrial Intelligent Engineering Research Center, Tianjin 300400, China;
3. Tianjin Development Zone Jingnuo Data Technology Co., Ltd., Tianjin 300400, China;
4. School of Materials Science and Engineering, Hebei University of Technology, Tianjin 300400, China;
5. China Auto Data(Tianjin) Co., Ltd., Tianjin 300393, China

Received:2021-07-09 Revised:2021-08-31 Published:2021-09-07

摘要/Abstract

摘要： 传统区块链技术处理交易能力弱、吞吐量低，不仅难以处理工业环境下的海量数据，而且其访问控制策略权限管理效率低，安全性不足。针对上述问题，提出一种基于主侧链合作的工业物联网访问控制策略。通过Plasma Cash框架构建高性能DPOS侧链，并根据合约将侧链与主链双向锚定，实现区块链的主侧链扩容。根据工业物联网的节点特点和主侧链区块链的运行环境，设计适用于主侧链环境的访问控制模型，访问控制模型内的主客体信息收集点阻隔外部实体直接访问，信息处理点实现访问控制策略执行与存储分离。将模型编写成图灵完备智能合约后放至侧链上，侧链负责合约的执行并通过稀疏默克尔树算法与主链进行数据的批量同步验证。实验结果表明，该策略可对基于工业物联网的区块链传输速度和稳定性进行有效优化，提高了控制策略的管理效率和安全性，可满足工业物联网中的使用需求。

关键词: 工业物联网, 区块链, 访问控制, 智能合约, 扩容技术

Abstract: Based on the weak transaction processing capacity and low throughput of traditional blockchain technology, it is not only difficult to process massive amounts of data in an industrial environment, but access control strategies also have low authority management efficiency and insufficient security.To solve these problems, a blockchain access control model strategy based on master side chain cooperation is proposed.This strategy constructs a high-performance Delegated Proof Of Stake(DPOS) side chain using the Plasma Cash framework and anchors the side chain and main chain in both directions through a contract to realize the expansion of the main and side chains of the blockchain. According to the node characteristics of the industrial Internet of Things (IoT) and the environment of the main and side chain blockchains, an access control model suitable for the main and side chain environments is designed.The subject and object information collection points in the model block direct access by external entities and the information processing points separate access control policy execution and storage.The model is defined in a Turing-complete smart contract and located on the side chain.The side chain is responsible for the execution of the contract and performs batch synchronization verification of data with the main chain using the sparse Merkle tree algorithm.Experimental results demonstrate that this strategy not only effectively optimizes the transmission speed and stability of the blockchain based on the industrial IoT, but also improves the management efficiency and security of the control strategy and meets the needs of the industrial IoT.

Key words: industrial Internet of Things(IoT), blockchain, access control, smart contract, expansion technology

中图分类号:

TP302

刘晶, 朱炳旭, 梁佳杭, 任女尔, 季海鹏. 基于主侧链合作的区块链访问控制策略[J]. 计算机工程, 2022, 48(3): 10-16,22.

LIU Jing, ZHU Bingxu, LIANG Jiahang, REN Nüer, JI Haipeng. Blockchain Access Control Strategy Based on Mainchain and Sidechain Cooperation[J]. Computer Engineering, 2022, 48(3): 10-16,22.

https://www.ecice06.com/CN/Y2022/V48/I3/10

图/表 10

20220330200230

20220330200236

20220330200241

20220330200246

20220330200250

20220330200256

20220330200300

20220330200305

20220330200309

20220330200313

参考文献

[1] ASHUTOSH D, GAUTAM S, SHALINI D, et al.A decentralized privacy-preserving healthcare blockchain for IoT[J].Sensors, 2019, 19(2):326.
[2] 刘晶, 秦国帅, 孟德凯, 等.数据融合驱动的余热锅炉阀门调节方法[J].燕山大学学报, 2021, 45(1):76-86, 94. LIU J, QIN G S, MENG D K, et al.Data fusion driven waste heat boiler valve adjustment method[J].Journal of Yanshan University, 2021, 45(1):76-86, 94.(in Chinese)
[3] CHANSON M, BOGNER A, BILGERI D, et al.Blockchain for the IoT:privacy-preserving protection of sensor data[J].Journal of the Association for Information Systems, 2019, 20(9):1272-1307.
[4] 张建国, 胡晓辉.基于以太坊的改进物联网设备访问控制机制研究[J].计算机工程, 2021, 47(4):32-39, 47. ZHANG J G, HU X H.Research on improved access control mechanism of Internet of things devices based on ethereum[J].Computer Engineering, 2021, 47(4):32-39, 47.(in Chinese)
[5] 张亮, 刘百祥, 张如意, 等.区块链技术综述[J].计算机工程, 2019, 45(5):1-12. ZHANG L, LIU B X, ZHANG R Y, et al.Overview of blockchain technology[J].Computer Engineering, 2019, 45(5):1-12.(in Chinese)
[6] 张江徽, 崔波, 李茹, 等.基于智能合约的物联网访问控制系统[J].计算机工程, 2021, 47(4):21-31. HANG J H, CUI B, LI R, et al.Access control system of Internet of things based on smart contract[J].Computer Engineering, 2021, 47(4):21-31. (in Chinese)
[7] 孙广成, 李洪赭, 李赛飞, 等.基于区块链的物联网访问控制系统[J].计算机与现代化, 2020(11):100-108, 116. SUN G C, LI H Z, LI S F, et al.Internet of things access control system based on blockchain[J].Computer and Modernization, 2020(11):100-108, 116.(in Chinese)
[8] 解雯霖.许可区块链高效共识及跨链机制研究[D].济南:山东大学, 2019. XIE W L.Research on efficient consensus and cross chain mechanism of licensed blockchain[D].Jinan:Shandong University, 2019.(in Chinese)
[9] 徐雪松, 金泳, 曾智, 等.应用于工业互联网数据安全的分层轻量级高通量区块链方法[J].计算机集成制造系统, 2019, 25(12):3258-3266. XU X S, JIN Y, ZENG Z, et al.Hierarchical lightweight high-throughput blockchain for industrial Internet data security[J].Computer Integrated Manufacturing Systems, 2019, 25(12):3258-3266.(in Chinese)
[10] LI M, TANG H L, REFAEY H A.A sidechain-based decentralized authentication scheme via optimized two-way peg protocol for smart community[J].IEEE Open Journal of the Communications Society, 2020, 1:282-292.
[11] NAKAMOTO S.Bitcoin:a peer-to-peer electronic cash system[EB/OL].[2021-06-05].https://www.researchgate.net/publication/228640975.
[12] AMRITRAJ S, KELLY C.Sidechain technologies in blockchain networks:an examination and state-of-the-art review[J].Journal of Network and Computer Applications, 2020, 149:102-115.
[13] 劳卫伦, 王柏勇, 张锐, 等.基于区块链的电力数据容灾备份方案[J].计算机工程, 2019, 45(11):9-15. LAO W L, WANG B Y, ZHANG R, et al.Disaster tolerance and backup scheme of power data based on blockchain[J].Computer Engineering, 2019, 45(11):9-15.(in Chinese)
[14] ALYSSA D, INEMA O, COREY E B.Scaling blockchains to support electronic health records for hospital systems[C]//Proceedings of the 10th IEEE Annual Ubiquitous Computing, Electronics and Mobile Communication Conference.Washington D.C., USA:IEEE Press, 2019:550-556.
[15] FARD K, ABDULAZIZ A A, AMEENA A S.An effective secured peer-to-peer energy market based on blockchain architecture for the interconnected microgrid and smart grid[C]//Proceedings of International Journal of Electrical Power and Energy Systems.Washington D.C., USA:IEEE Press, 2021:136-147.
[16] MIN H.Blockchain technology for enhancing supply chain resilience[J].Business Horizons, 2019, 62(1):35-45.
[17] 谢绒娜, 李晖, 史国振, 等.基于区块链的可溯源访问控制机制[J].通信学报, 2020, 41(12):82-93. XIE R N, LI H, SHI G Z, et al.Blockchain-based access control mechanism for data traceability[J].Journal on Communications, 2020, 41(12):82-93.(in Chinese)
[18] 张朝栋, 王宝生, 邓文平.基于侧链技术的供应链溯源系统设计[J].计算机工程, 2019, 45(11):1-8. ZHANG C D, WANG B S, DENG W P.Design of supply chain traceability system based on side chain technology[J].Computer Engineering, 2019, 45(11):1-8.(in Chinese)
[19] 史锦山, 李茹.物联网下的区块链访问控制综述[J].软件学报, 2019, 30(6):1632-1648. SHI J S, LI R.Survey of blockchain access control in Internet of things[J].Journal of Software, 2019, 30(6):1632-1648.(in Chinese)
[20] 吴振铨, 梁宇辉, 康嘉文, 等.基于联盟区块链的智能电网数据安全存储与共享系统[J].计算机应用, 2017, 37(10):2742-2747. WU Z Q, LIANG Y H, et al.Secure data storage and sharing system based on consortium blockchain in smart grid[J].Journal of Computer Applications, 2017, 37(10):2742-2747.(in Chinese)
[21] ZHANG Y P, ALI M, NIRUPAM B.A review on blockchain-based access control models in IoT applications[C]//Proceedings of IEEE International Conference on Control and Automation.Washington D.C., USA:IEEE Press, 2020:671-676.
[22] RAHMAN M S, OMAR A, BHUIYAN M Z A, et al.Accountable cross-border data sharing using blockchain under relaxed trust assumption[J].IEEE Transactions on Engineering Management, 2020, 67(4):1476-1486.
[23] 张建国, 胡晓辉.基于以太坊的改进物联网设备访问控制机制研究[J].计算机工程, 2021, 47(4):32-39, 47. ZHANG J G, HU X H.Research on improved access control mechanism of Internet of things devices based on ethereum[J].Computer Engineering, 2021, 47(4):32-39, 47.(in Chinese)
[24] PRADNYA P, SANGEETHA M, VIDHYACHARAN B.Blockchain for IoT access control, security and privacy:a review[J].Wireless Personal Communications, 2021, 117(3):1815-1834.
[25] 刘晶, 张喆语, 董志红, 等.基于工业物联网的区块链多目标优化方法[J].计算机集成制造系统, 2021, 27(8):2382-2392. LIU J, ZHANG Z Y, DONG Z H, et al.Multi-objective optimization of blockchain based on industrial Internet of things[J].Computer Integrated Manufacturing Systems, 2021, 27(8):2382-2392.(in Chinese)
[26] SAPTARSHI D, BARSHA M, ATLUIR V.Policy engineering in RBAC and ABAC[M].Berlin, Germany:Springer, 2018.
[27] JON C, ROBBIE M, ARMON D, et al.Informed privilege-complexity trade-offs in RBAC configuration[C]//Proceedings of the 25th ACM Symposium on Access Control Models and Technologies.New York, USA:ACM Press, 2020:119-130.

选择文件类型/文献管理软件名称

选择包含的内容

基于主侧链合作的区块链访问控制策略

Blockchain Access Control Strategy Based on Mainchain and Sidechain Cooperation

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	郑清安, 董建成, 陈亮, 阮英清, 李锦松, 许林彬. 分布式可信数据管理与隐私保护技术研究[J]. 计算机工程, 2024, 50(7): 174-186.
[2]	刘寅昊, 蒋文保, 孙林昆, 王勇攀. 基于路径存储表的Hashgraph共识算法优化与实现[J]. 计算机工程, 2024, 50(6): 166-178.
[3]	旋逸昭, 赵红武, 金瑜. 一种基于双链的区块链共识机制[J]. 计算机工程, 2024, 50(5): 139-148.
[4]	王栋, 王合建, 玄佳兴, 郑尚卓, 陈炳聪. 面向电力调度指令的区块链隐私可追踪存证方案[J]. 计算机工程, 2024, 50(5): 158-166.
[5]	陈纪成, 包子健, 罗敏, 何德彪. 一种面向工业物联网的远程安全指令控制方案[J]. 计算机工程, 2024, 50(3): 28-35.
[6]	李宝莹, 李志淮, 王成爱, 杨锋. 自适应节点规模的区块链分片可扩展模型[J]. 计算机工程, 2024, 50(3): 137-147.
[7]	刘少杰, 文斌, 王泽旭. 基于联邦学习的多技术融合数据交易方法[J]. 计算机工程, 2024, 50(3): 182-190.
[8]	倪雪莉, 马卓, 王群. 区块链矿池网络及典型攻击方式综述[J]. 计算机工程, 2024, 50(1): 17-29.
[9]	蔡梓越, 谭北海, 余荣, 黄旭民, 王思明. 面向6G物联网设备协同的区块链动态分片[J]. 计算机工程, 2024, 50(1): 50-59.
[10]	崔怀勇, 张绍华, 李超, 戴炳荣. 一种基于Schnorr签名的区块链预言机改进方案[J]. 计算机工程, 2024, 50(1): 166-173.
[11]	刘阳, 张圣杰. 一种基于时间自动机的安全智能合约生成方法[J]. 计算机工程, 2023, 49(9): 137-143, 157.
[12]	王群, 李馥娟, 倪雪莉, 夏玲玲, 梁广俊. 区块链数据形成与隐私威胁[J]. 计算机工程, 2023, 49(8): 1-12.
[13]	黄保华, 郑慧颖, 屈锡, 陈宁江. 联盟链高效存储访问控制方案[J]. 计算机工程, 2023, 49(8): 37-45.
[14]	陈福安, 柳毅. 基于区块链的V2G无证书环签密隐私保护方案[J]. 计算机工程, 2023, 49(6): 34-41,52.
[15]	高健博, 张家硕, 李青山, 陈钟. RegLang监管合约规则冲突检测方法[J]. 计算机工程, 2023, 49(5): 12-21,28.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

基于主侧链合作的区块链访问控制策略

Blockchain Access Control Strategy Based on Mainchain and Sidechain Cooperation

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献

相关文章 15

编辑推荐

Metrics

本文评价