基于区块链的物联网数据访问控制方案

Blockchain-Based IoT Data Access Control Scheme

摘要: 在万物互联的时代背景下，物联网飞速发展，无论从局部设备数量还是整体规模都呈现高速增长的趋势，随之而来的数据安全问题也日益凸显。属性基加密(ABE)是保护数据安全的核心技术之一。但是，将属性基加密方案应用到物联网环境中仍然面临着许多挑战。属性基加密基于双线性配对实现，这种基于线性配对实现的加密是是开销很高的操作，不适合资源受限的物联网设备。为了解决这个问题，本文提出了一种基于区块链的物联网数据访问控制方案，该方案借助智能合约技术，将属性基加密中开销高的双线性配对操作外包至区块链中执行，进行预解密，然后在本地验证区块链预解密的正确性，从而减轻了用户端的计算压力，解决了属性基加密应用于物联网环境开销高的问题，实现了轻量级的访问控制。安全分析结果表明，该方案在数据机密性、防篡改攻击和抵抗合谋攻击方面是可靠的。

Abstract: In the era of the Internet of Everything, the IoT has developed rapidly, showing a rapid growth trend in both the number of local devices and the overall scale, and the accompanying data security issues have become increasingly prominent. Attribute-based encryption (ABE) is one of the core technologies to protect data security. However, applying attribute-based encryption schemes to the Internet of Things environment still faces many challenges. Attribute-based encryption is implemented based on bilinear pairing, which is considered to be an expensive operation and is not suitable for resource-constrained IoT devices. In order to solve this problem, this paper proposes a blockchain-based IoT data access control scheme. Through smart contract technology, the bilinear pairing operation with high cost in attribute-based encryption is outsourced to the blockchain for execution, and predecryption is performed and then locally verifies the correctness of blockchain predecryption, thereby reducing the computational pressure on the user side, solving the problem of high cost of attribute-based encryption applied to the IoT environment, and realizing light-level access control. The security analysis results show that the scheme is reliable in terms of data confidentiality, anti-tampering attacks and resistance to collusion attacks.