Internet of Things privacy protection access control method based on block chain technology

Abstract

The invention discloses an Internet of Things privacy protection access control method based on block chain technology. The method comprises the steps that a resource owner defines an access permission strategy for a resource request of a requester; a policy management point of a resource owner performs language transformation on the access permission policy, generates a Token at the same time, and encrypts the Token by using the public key of the requester, and the resource owner sends the access permission policy to the requester as a transaction; the strategy management point of the resource owner broadcasts the transaction to the Internet of Things network, and packages the transaction into the block chain after determining that the transaction is valid; the requester initiates the transaction through the Token sent by the resource owner, and sends a decryption script of the access permission strategy after language conversion to the resource owner at the same time; and the resource owner verifies the correctness of the decryption script, determines whether to give access control authority to the resources to the requester according to a verification result, and uplinks the transaction record in the blockchain after the decryption script is correct.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of the Internet of Things, and in particular to a privacy protection access control method for the Internet of Things based on blockchain technology. Background technique [0002] IoT devices need to be identified, authenticated, and connected through a server, even if some devices are only a few feet away from each other, they must be connected through a server. The access control mechanism is used to manage resources in the Internet of Things and realize the controllable use of resources. The subject's right to use resources is expressed through access control policies. When the subject requests access to a resource, it will be based on the current access environment and access control The policy is evaluated to determine whether it has access to the resource. [0003] In the centralized IoT model, many traditional access control models are introduced. Examples include the role-...

AI Technical Summary

Problems solved by technology

[0006] To this end, the embodiment of the present invention provides a privacy protection access control method for the Internet of Things based on blockchain technology, which uses smart contracts to authorize and manage Internet of Things devices, and introduces Token for authorization management, and sets and executes access control policies to achieve For the privacy access control of the Internet of Things, centralized management is mostly used in authorization management. However, centralized management has hidden dangers of untrustworthy nodes, authorization is easily invalidated after nodes are attacked, and the efficiency of distributed management is low.

Images