作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2023, Vol. 49 ›› Issue (3): 18-28. doi: 10.19678/j.issn.1000-3428.0063794

• 热点与综述 • 上一篇    下一篇

家庭物联网中基于智能合约的访问控制机制

田秀霞, 杨明夷   

  1. 上海电力大学 计算机科学与技术学院, 上海 201306
  • 收稿日期:2022-01-20 修回日期:2022-04-07 发布日期:2023-03-09
  • 作者简介:田秀霞(1976—),女,教授、博士,主研方向为数据库安全、访问控制、区块链;杨明夷,硕士研究生。
  • 基金资助:
    国家自然科学基金面上项目“数据库服务中数据的隐私保护及可控性关键技术研究”(61772327);国网甘肃省电力公司电力科学研究院横向项目“基于深度学习的视觉图像完整性检测技术研究”(H2019-275);上海市大数据管理系统工程研究中心开放课题“面向大数据的动态访问控制机制研究”(H2020-216)。

Smart Contract-Based Access Control Mechanism in Home IoT

TIAN Xiuxia, YANG Mingyi   

  1. College of Computer Science and Technology, Shanghai University of Electric Power, Shanghai 201306, China
  • Received:2022-01-20 Revised:2022-04-07 Published:2023-03-09

摘要: 在海量家庭数据存储模式下,家庭中的物联网设备并非完全可信,为了保证设备使用者的数据安全和数据查询效率,需要实施访问控制,然而,目前已有的多数访问控制方案无法在大型分布式系统下既保证安全性又兼顾运行效率。针对该问题,提出基于智能合约技术的访问控制框架并设计分组策略检索算法,以实现一种家庭物联网中安全高效的访问控制。在智能合约访问控制框架中,通过区块链存储访问控制策略保证访问信息的可追溯性以及用户数据的安全性,同时改进基于属性的访问控制模型,实现灵活且可扩展的访问控制。通过构造分组策略检索算法来提高策略的检索效率,在访问控制判决时快速搜索策略。基于智能家居进行访问实现,结果表明该机制能提供安全且高效动态的细粒度访问控制,在大量相同的策略规则下,其系统吞吐量不低于65 T/s,优于Fabric-IoT、DAHB等访问控制方案,更适合大规模家庭物联网环境下的访问请求场景。

关键词: 区块链, 访问控制, 智能合约, 基于属性的访问控制模型, 家庭物联网

Abstract: In a massive home data storage mode, the Internet of Things(IoT) devices are not trusted.To ensure data security and data query efficiency of the device users, access control needs to be implemented. However, most existing access control schemes can not guarantee security and efficiency in large distributed systems.To solve this problem, an access control framework based on smart contract technology is proposed and a group policy retrieval algorithm is designed to achieve a safe and efficient access control in the home IoT. In the smart contract access control framework, a blockchain storage access control strategy is used to ensure the traceability of access information and the security of user data. Moreover, the Attribute-Based Access Control(ABAC) model is improved to achieve flexible and scalable access control. The efficiency of policy retrieval is improved by constructing a group policy retrieval algorithm, and the policy is searched quickly in the access control decision.The result of access implementation based on smart home verifies that the mechanism can provide safe, efficient, and dynamic fine-grained access control. Under many similar policy rules, its system throughput is not less than 65 T/s, which is better than access control schemes such as Fabric-IoT and DAHB, and it is suitable for access request scenarios in a large-scale home IoT environment.

Key words: blockchain, access control, smart contract, Attribute-Based Access Control(ABAC) model, home Internet of Things(IoT)

中图分类号: