面向物联网的基于智能合约的认证和授权方案

由于存在单点失效、规模受限等问题,传统中心化的解决方案很难满足物联网的安全需求。针对这种情况,提出一个面向IoT的基于智能合约的访问控制方案。通过引用IoT智能网关作为IoT设备的中心管理节点和公有区块链的全能节点,采用中心化与去中心化相结合、私有区块链和公有区块相结合、本地局部存储和外部公共存储相结合的方法加以实现。该方案实现IoT设备和IoT智能网关的相互认证,并实现用户对IoT设备中资源及存储在数据库中的数据的授权访问,具有去中心化、分布式优点,满足了规模性和安全性要求。

AUTHENTICATION AND AUTHORIZATION SCHEME FOR THE INTERNET OF THINGS BASED ON SMART CONTRACT

Because of the existence of the security problems such as the single point of failure and limited scalability,the traditional centralized schemes do not satisfy the security requirements of the Internet of Things(IoT).In view of this,we propose an access control scheme for IoT based on smart contract.We introduced an IoT smart gateway as central management node for IoT devices and as the full node of the public block chain.We adopted the method which combined centralization and decentralization,combined private and public block chains,and combined local and public storage.The scheme achieves the mutual authentication of IoT devices and IoT smart gateway,and achieves the authorized access to the resources in IoT devices and the data in database.It has the advantages of centralization and decentralization,and can satisfy the requirements of scalability and security.