基于区块链的数据访问控制框架
Data Access Control Framework Based on Blockchain
DOI: 10.12677/CSA.2019.95102, PDF,   
作者: 熊 政*, 厉文婕：江苏方天电力技术有限公司，江苏 南京；姚 磊：东南大学软件学院，江苏 南京
关键词: 开放环境；区块链；权限；访问控制；Open Environment； Blockchain； Permission； Access Control
摘要: 在互联网环境下，对数据的访问控制成为当前信息系统的研究热点，传统的安全领域使用的如加密、认证、入侵检测以及访问控制等技术已不能满足在开放环境下对数据访问的要求。基于此本文提出通过采用区块链技术来管理用户的访问权限。这有效地实现了公共环境下各方参与者对数据的控制访问。
Abstract: In the Internet environment, access control of data has become a research hotspot of current information systems. Technologies such as encryption, authentication, intrusion detection, and access control used in traditional security fields cannot meet the requirements for data access in an open environment. Based on this paper, we propose to manage user access rights by using blockchain technology. This effectively achieves controlled access to data by participants in the public environment.
文章引用：熊政, 姚磊, 厉文婕. 基于区块链的数据访问控制框架[J]. 计算机科学与应用, 2019, 9(5): 904-911. https://doi.org/10.12677/CSA.2019.95102

参考文献

[1] 房梁, 殷丽华, 郭云川, 方滨兴. 基于属性的访问控制关键技术研究综述[J]. 计算机学报, 2017, 40(7): 1680-1698.
[2] Mahnken, S. (2014) Today’s Authentication Options: The Need for Adaptive Multifactor Authentication. Biometric Technology Today, 2014, 8-10. [Google Scholar] [CrossRef] 
[3] 刘帝, 吴鹏. 一种基于区块链的个人数据保护模型[J]. 信息与电脑(理论版), 2018(21): 140-142.
[4] Zyskind, G., Nathan, O. and Pentland, A. (2015) Decentralizing Privacy: Using Blockchain to Protect Personal Data. 2015 IEEE Security and Privacy Workshops, San Jose, CA, 21-22 May 2015, 180-184. [Google Scholar] [CrossRef] 
[5] 贺海武, 延安, 陈泽华. 基于区块链的智能合约技术与应用综述[J]. 计算机研究与发展, 2018, 55(11): 2452-2466.
[6] 关振胜. 公钥基础设施PKI与认证机构CA[M]. 北京: 电子工业出版社, 2002.
[7] 赵明斌, 姚志强. 基于RBAC的云计算访问控制模型[J]. 计算机应用, 2013, 32(S2): 267-270.
[8] 李凤华, 苏铓, 史国振, 马建峰. 访问控制模型研究进展及发展趋势[J]. 电子学报, 2012, 40(4): 805-813.
[9] Yuan, E. and Tong, J. (2005) Attributed Based Access Control (ABAC) for Web Services. IEEE International Conference on Web Services, Orlando, FL, 11-15 July 2005, 569. [Google Scholar] [CrossRef] 
[10] Park, J. and Sandhu, R. (2002) Towards Usage Control Models: Beyond Traditional Access Control. In: Proceedings of ACM Symposium on Access Control Models and Technologies, ACM, New York, 57-64. [Google Scholar] [CrossRef] 
[11] Zhang, G. and Gong, W. (2011) The Research of Access Control Based on UCON in the Internet of Things. Journal of Software, 6, 724-731. [Google Scholar] [CrossRef] 
[12] 史锦山, 李茹. 物联网下的区块链访问控制综述[J/OL]. 软件学报: 1-17, 2019-04-03.
[13] Shen, H.-B. and Liu, S.-B. (2014) A Context-Aware Capabil-ity-Based Access Control Framework for the Internet of Things. Journal of Wuhan University, 60, 424-428.
[14] Gusmeroli, S., Pic-cione, S. and Rotondi, D. (2013) A Capability-Based Security Approach to Manage Access Control in the Internet of Things. Mathe-matical & Computer Modelling, 58, 1189-1205. [Google Scholar] [CrossRef] 
[15] Merkle, R.C. (1987) A Digital Signature Based on a Conventional Encryption Function. In: Pomerance, C., Eds., Advances in Cryptology—CRYPTO’ 87. CRYPTO 1987. Lecture Notes in Computer Science, Springer, Berlin, Heidelberg, 369-378. [Google Scholar] [CrossRef] 
[16] 韩璇, 袁勇, 王飞跃. 区块链安全问题: 研究现状与展望[J]. 自动化学报, 2019, 45(1): 206-225.