arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2104.00832cs.CR
收藏

IoT基于信任的区块链授权

Trust-based Blockchain Authorization for IoT

Guntur Dharma Putra, Volkan Dedeoglu, Salil S Kanhere, Raja Jurdak, Aleksandar Ignjatovic

摘要:

授权或访问控制基于预定的访问控制策略来限制用户可以在计算机系统上执行的动作,从而防止非法参与者的访问。物联网(IoT)的访问控制应考虑到固有的IoT网络规模和设备资源限制。然而,物联网中常见的授权系统采用传统的方案,这些方案存在开销和集中化的问题。最近的研究趋势表明,区块链有可能解决物联网中的访问控制问题。然而,所提出的解决方案忽略了建立动态和灵活的访问控制机制的重要性。在本文中,我们设计了一个分散的基于属性的访问控制机制与辅助信任和信誉系统(TRS)的物联网授权。我们的系统逐步量化的信任和信誉分数的每个节点在网络中,并将分数的访问控制机制,以实现动态和灵活的访问控制。我们将系统设计为在公共区块链上运行,但我们将敏感信息(如用户属性)的存储分离到私有侧链以保护隐私。我们在一个与实验室规模测试平台互连的公共Rinkeby以太坊测试网络中实现了我们的解决方案。我们的评估考虑了各种性能指标,以突出我们的解决方案对物联网环境的适用性。

英文摘要:

Authorization or access control limits the actions a user may perform on a computer system, based on predetermined access control policies, thus preventing access by illegitimate actors. Access control for the Internet of Things (IoT) should be tailored to take inherent IoT network scale and device resource constraints into consideration. However, common authorization systems in IoT employ conventional schemes, which suffer from overheads and centralization. Recent research trends suggest that blockchain has the potential to tackle the issues of access control in IoT. However, proposed solutions overlook the importance of building dynamic and flexible access control mechanisms. In this paper, we design a decentralized attribute-based access control mechanism with an auxiliary Trust and Reputation System (TRS) for IoT authorization. Our system progressively quantifies the trust and reputation scores of each node in the network and incorporates the scores into the access control mechanism to achieve dynamic and flexible access control. We design our system to run on a public blockchain, but we separate the storage of sensitive information, such as user's attributes, to private sidechains for privacy preservation. We implement our solution in a public Rinkeby Ethereum test-network interconnected with a lab-scale testbed. Our evaluations consider various performance metrics to highlight the applicability of our solution for IoT contexts.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑