Tokoin：一种基于硬币的物联网可计费访问控制方案
Tokoin: A Coin-Based Accountable Access Control Scheme for Internet of Things
摘要：
随着物联网（IoT）应用的普及，IoT设备与我们周围的环境密切互动，为我们带来了无与伦比的智能和便利。然而，安全物联网解决方案的发展远远落后，使我们暴露在常见的未经授权的访问中，这些访问可能会给我们的日常生活带来恶意攻击和前所未有的危险。过度特权攻击是物联网中广泛报道的一种现象，它访问未经授权或过多的资源，众所周知，很难预防，跟踪和减轻。为了应对这一挑战，我们提出了基于令牌的访问控制（TBAC），这是一种由区块链和可信执行环境（TEE）技术支持的可问责访问控制模型，为物联网提供细粒度，强可扩展性和访问过程控制。TBAC将虚拟访问权具体化为一种称为“tokoin”（令牌+硬币）的定量和安全的加密硬币，并使用区块链中的原子和可问责的状态转换功能对其进行管理。我们还通过为每个tokoin指定一个细粒度的访问策略来实现访问过程控制，该策略定义了谁被允许在何时何地如何做什么。代币是点对点可转让的，并且只能在必要时由资源所有者修改。我们使用经过充分研究的加密原语和区块链平台完全实现了TBAC，并为普通用户提供了一个随时可用的APP。我们还提出了一个案例研究，以展示如何TBAC是用来实现自主的在家里的货物交付，同时保证访问政策的合规性和业主的物理安全，通过调节送货员的物理行为。
英文摘要：
With the prevalence of Internet of Things (IoT) applications, IoT devices interact closely with our surrounding environments, bringing us unparalleled smartness and convenience. However, the development of secure IoT solutions is getting a long way lagged behind, making us exposed to common unauthorized accesses that may bring malicious attacks and unprecedented danger to our daily life. Overprivilege attack, a widely reported phenomenon in IoT that accesses unauthorized or excessive resources, is notoriously hard to prevent, trace and mitigate. To tackle this challenge, we propose Tokoin-Based Access Control (TBAC), an accountable access control model enabled by blockchain and Trusted Execution Environment (TEE) technologies, to offer fine-graininess, strong auditability, and access procedure control for IoT. TBAC materializes the virtual access power into a definite-amount and secure cryptographic coin termed "tokoin" (token+coin), and manages it using atomic and accountable state-transition functions in a blockchain. We also realize access procedure control by mandating every tokoin a fine-grained access policy defining who is allowed to do what at when in where by how. The tokoin is peer-to-peer transferable, and can be modified only by the resource owner when necessary. We fully implement TBAC with well-studied cryptographic primitives and blockchain platforms and present a readily available APP for regular users. We also present a case study to demonstrate how TBAC is employed to enable autonomous in-home cargo delivery while guaranteeing the access policy compliance and home owner's physical security by regulating the physical behaviors of the deliveryman.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
