Blockchain technology-based industrial internet of things security and privacy enhancement operation architecture design method

Abstract

The application provides a kind of industrial internet of things security and privacy enhancement operation architecture design method based on blockchain technology.The application introduces a blockchain network architecture integrated with light node and full node;Internet of Things devices as light nodes implement asymmetric encryption and transaction sending;Management host as full node and with all blockchain technology functions;A kind of PoA consensus mechanism based on verification is used to ensure computing efficiency;A specific smart contract is designed to provide functions including whitelist mechanism, sensor data recording, data monitoring and executor control;Through implementation on the prototype, the feasibility of the proposed architecture is verified. Through multiple simulation tests, the proposed architecture and traditional architecture are compared and analyzed in terms of security and privacy, timeliness and other evaluation indicators. The method of the application can solve the problems of security and privacy exposure and network attack surface expansion in the industrial internet of things scenario, and meet the real-time requirements of industrial network, and has good scalability.

Description

Technical Field

[0001] This invention relates to a method for designing a security architecture for the Industrial Internet of Things (IoT), and in particular, a method for designing an operational architecture for enhancing security and privacy in the Industrial IoT based on blockchain technology. Background Technology

[0002] The continuous development and application of information and communication technologies such as big data analytics, cloud computing and edge computing, and artificial intelligence are gradually propelling modern industrial control systems to new heights. In particular, the integration of the Internet of Things (IoT) with industry is the core of achieving intelligent and networked manufacturing processes. Industrial IoT platforms enable data interaction among ubiquitous heterogeneous industrial equipment in smart factories, helping managers make real-time decisions, prevent accidents, and improve efficiency based on collected big data. The Industrial IoT plays an indispensable role in realizing the Fourth Industrial Revolution, aiming to achieve greater connectivity, integrity, and scalability in industry.

[0003] While the Industrial Internet of Things (IIoT) offers new opportunities for optimizing production processes, it also poses significant requirements and challenges to the privacy and security of current industrial architectures. Typical IIoT systems, generally based on cloud-based operations centers for data analysis and industrial processing, are susceptible to single points of failure and cyberattacks. Once a centralized operations center is compromised by a cyberattack, stored data may be leaked and malicious operations may be executed. Furthermore, as the number of deployed IoT devices increases, the attack surface for malicious cyberattacks is rapidly expanding. Communication between IoT devices is also at risk of interception or tampering, compromising the reliability of transmitted data. These weaknesses and deficiencies in traditional architectures can not only lead to the leakage of sensitive data but also the transmission of malicious commands, resulting in social and economic problems, and even national security issues. To overcome these shortcomings, it is imperative to transform and upgrade the current IIoT architecture to enhance security and privacy.

[0004] Given the rapid pace of malicious file updates today, training attack detection machine learning models using only existing datasets may result in the model failing to detect variants of some malicious files, increasing the false negative rate. Furthermore, many machine learning algorithms are highly vulnerable to deliberate attacks; that is, machine learning-based malicious file detection models can be easily bypassed by adversarial techniques. Therefore, researching adversarial example generation methods can help improve the anti-obfuscation and anti-perturbation capabilities of machine learning detection models.

[0005] In recent years, the integration of blockchain technology and the Internet of Things (IoT) has garnered significant attention in both academia and industry. Blockchain, essentially a decentralized ledger, stores and processes data in a distributed manner. By leveraging its decentralized, tamper-proof, and unique characteristics, blockchain technology holds immense potential in addressing the security challenges of traditional Industrial IoT architectures. While utilizing blockchain to improve security and privacy, it's crucial to meet the stringent requirements of blockchain-based architectures in the industrial sector. However, existing research has largely overlooked this issue and suffers from several shortcomings. First, the real-time capabilities of Industrial IoT systems are impacted by the increased computational complexity introduced by blockchain technology, and the trade-off between latency and security has not been thoroughly considered. Second, most researchers focus only on single data interaction operations using blockchain technology, neglecting most operations including sensing, monitoring, and command execution. Finally, the feasibility of practical implementation of the architecture may encounter unpredictable problems. Summary of the Invention

[0006] The purpose of this invention is to address the problem of designing a secure and reliable operational architecture based on blockchain technology in the Industrial Internet of Things (IIoT) field. It proposes a comprehensive analytical method to address the shortcomings in research on the application of blockchain technology in the IIoT field. The proposed blockchain-based IIoT security and privacy enhancement architecture design method provides guidance for the application of blockchain technology in the IIoT field and covers most industrial operations.

[0007] The objective of this invention can be achieved through the following technical solution: a method for designing an industrial IoT security and privacy enhancement operating architecture based on blockchain technology, comprising the following steps:

[0008] (1) Establish an Industrial Internet of Things (IIoT) architecture based on blockchain technology, which includes a three-layer architecture: industrial field layer, blockchain service layer, and application layer;

[0009] (2) Establish a blockchain network suitable for industrial IoT scenarios based on the industrial IoT architecture, and introduce security encryption technology and consensus algorithm mechanism in blockchain technology;

[0010] (3) Design custom smart contracts; and build specific security operation mechanisms in the blockchain network based on the relevant functions of the custom smart contracts;

[0011] (4) Analyze and evaluate the safety operation mechanism from the aspects of safety and timeliness, and determine the industrial Internet of Things architecture that meets the requirements.

[0012] As a preferred embodiment of the present invention, in step (1), the industrial field layer includes various types of sensors and actuators, each sensor or actuator is connected to at least one microcomputer, and the microcomputer has direct control and data acquisition authority over each sensor or actuator; the microcomputer connected to the sensor is responsible for transmitting the sensor data to the blockchain after data encryption preprocessing; the microcomputer connected to the controller is responsible for accepting transactions from the blockchain and performing operation execution after data decryption processing.

[0013] The blockchain service layer provides blockchain services for the industrial Internet of Things, provides service interfaces to the application layer, and interacts with field devices as needed.

[0014] The application layer is the entry point for users to access the blockchain and perform related operations in the architecture; authenticated users can obtain visualized data and place control commands in the application layer, sending related operations to the blockchain service layer for verification in the form of transactions.

[0015] As a preferred embodiment of the present invention, the specific content of establishing the blockchain network in step (2) is as follows:

[0016] Establish a private blockchain to provide general blockchain services for the Industrial Internet of Things (IIoT); improve the transaction information in the private blockchain to operational information in the IIoT environment; use blocks to record operational information in the blockchain, with each block consisting of a block header and a block body; the block header records structured data of the block characteristics; and the block body records sensing and control information.

[0017] Blockchain includes two types of nodes: full nodes and light nodes. Full nodes are computer devices with computing power and the ability to store block information. They can receive and broadcast transactions, verify them according to the corresponding consensus algorithm, and seal them into blocks. Light nodes are microcomputers with limited power in the system. Due to their limited computing and storage capabilities, they do not need to store block information. Their main function is to encrypt and decrypt data.

[0018] As a preferred embodiment of the present invention, the security encryption technology in step (2) specifically includes:

[0019] The Elliptic Curve Digital Signature Algorithm (ECDSA) is used to generate public and private keys for all nodes. The public key represents the public and accessible part of the node, while the private key represents the confidential part. The SHA256 hash algorithm is then used to process the data in the transaction and generate a message digest. The message digest is encrypted with the sender's private key to generate a digital signature, which is also recorded in the transaction as proof of identity. The receiver uses the sender's public key to decrypt the digital signature and compares it with the message digest calculated using the SHA256 hash to verify its authenticity. If the result is true, the transmitted data is considered secure and intact, and has not been tampered with; otherwise, the transmitted data has been tampered with.

[0020] As a preferred embodiment of the present invention, the consensus algorithm in step (2) is specifically as follows:

[0021] The Proof-of-Agent (PoA) consensus algorithm is used to generate and verify blocks. There are N full nodes in the blockchain that participate in the verification of blocks. Blocks are created in rounds, and each full node is allowed to propose a block in N rounds. In a specific round of a full node, it records the transaction into the block and signs the block with its private key. The signature is stored in the block header and broadcast to other validators for signature verification. Only when more than N / 2+1 full nodes have successfully verified the block can it be recorded in the blockchain and updated on all full nodes in the blockchain.

[0022] As a preferred embodiment of the present invention, in step (3):

[0023] Design a custom smart contract and deploy it on all nodes of the blockchain. The custom smart contract includes seven basic functions: 1) Sensor registration function, which records trusted sensors in the Industrial Internet of Things (IIoT) in a list format; 2) Actuator registration function, which records trusted actuators in the IIoT in a list format; 3) Ordinary user registration function, which records ordinary authorized users in the IIoT in a list format; 4) Authorized user registration function, which records authorized users in the IIoT in a list format; 5) Sensor data recording function, which records sensor data uploaded by light nodes; 6) Data display and supervision function, which allows ordinary users and authorized users to obtain and supervise sensor data; 7) Actuator control function, which allows authorized users to control actuators.

[0024] As a preferred embodiment of the present invention, the sensing data recording process first collects data from the sensors connected to the corresponding light nodes, and applies to upload the sensing data according to the sensing data recording function; the smart contract checks whether the sensor ID exists in the sensor registration list; when all sensor IDs are detected to exist, the light node is allowed to initiate a transaction containing encrypted sensing data; the blockchain verifies the transaction based on the consensus algorithm and seals it into a block.

[0025] As a preferred embodiment of the present invention, the data display and monitoring function allows all users to request access to sensor data stored on the blockchain; the smart contract checks the user's ID and verifies the password based on the list of ordinary users registered and the list of authorized users registered; after the password is verified correctly, the blockchain will provide the user with a visual display of the data through the application layer interface; users can obtain the data stored on the chain in real time and perform data anomaly monitoring.

[0026] In a preferred embodiment of the present invention, the actuator controls the operation of the authorized user; the smart contract checks the ID of the authorized user according to the authorized user registration list and verifies the password; when the password is verified correctly, the blockchain will provide the authorized user with a display interface for operating the actuator at the application layer; the authorized user sends control commands according to the operation requirements, and the smart contract initiates a transaction involving the control commands; the blockchain verifies the transaction based on the consensus algorithm and seals it into a block; after the block is recorded, the full node will send encrypted control commands to the corresponding light node; the light node decrypts and executes the commands after receiving them.

[0027] As a preferred embodiment of the present invention, step (4) specifically comprises:

[0028] (4.1) Real-time performance evaluation. The main factors affecting the real-time performance of operations can be divided into two parts: 1) The computation time from initiating a transaction to sealing a block using the consensus algorithm. Specifically, this involves considering different numbers of field devices and full nodes to evaluate the computation time required for the consensus algorithm to seal a block when performing related operations; 2) The computation time for light nodes to encrypt or decrypt data. Specifically, this involves evaluating the computation time required for light nodes to encrypt and decrypt data based on ECDSA.

[0029] (4.2) Security index assessment: Simulate the process of an attacker attempting to intrude into the recorded sensor data. The attacks can be divided into the following three categories: 1) Tampering with the sensor data collected in the light node, 2) Tampering with the data transmitted between the light node and the operator station, and 3) Tampering with the data in the operator station. Calculate the success probability of the three types of attacks under the conditions of "with blockchain" and "without blockchain" to assess its security index. In the case of "with blockchain", the operator station is a full blockchain node network, and in the case of "without blockchain", it is a central host.

[0030] (4.3) Based on the requirements of real-time performance and security indicators, determine the industrial Internet of Things architecture that meets the requirements of real-time performance and security.

[0031] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0032] (1) This invention proposes a blockchain-based architecture design method for enhancing security and privacy in the industrial Internet of Things (IoT). To reduce the power consumption of blockchain technology integration, this invention introduces a blockchain network into the industrial IoT field, where IoT devices are represented as light nodes that only need to implement asymmetric cryptographic algorithms and initiate transactions, while computer devices are represented as full nodes with all blockchain technology functions. This invention also proposes a verification-based PoA consensus algorithm with high computational efficiency to meet the real-time requirements of the industrial field.

[0033] (2) The method of the present invention can utilize blockchain technology to ensure the privacy and security of industrial IoT operations in the field of industrial IoT. In order to address the challenge of covering most operations, the present invention proposes a specially designed smart contract that provides operational functions including sensor data recording, data display and monitoring, and actuator control, which has guiding significance for improving the combination of industrial IoT and blockchain technology to enhance security and privacy. Attached Figure Description

[0034] Figure 1 This is a flowchart of the present invention;

[0035] Figure 2 It is an industrial IoT architecture based on blockchain technology;

[0036] Figure 3 This is a diagram of the sensor data recording process;

[0037] Figure 4 It is a data display and monitoring process diagram;

[0038] Figure 5 This is an actuator control process diagram;

[0039] Figure 6 It is a block information diagram;

[0040] Figure 7 It records sensor data and calculates time box plots;

[0041] Figure 8 It is a control command calculation time box plot;

[0042] Figure 9 This is a security analysis diagram with and without blockchain.

[0043] Figure 10 This is a diagram showing the safety performance. Detailed Implementation

[0044] The present invention will be described in detail below with reference to the accompanying drawings, and the objectives and effects of the present invention will become more apparent.

[0045] The proposed blockchain-based industrial IoT security and privacy enhancement architecture design method has the following process: Figure 1 As shown, the main steps include:

[0046] Step 1: Establish an industrial IoT architecture based on blockchain technology, which includes a three-layer architecture: industrial field layer, blockchain service layer, and application layer.

[0047] Step 2: Establish a lightweight blockchain network suitable for industrial IoT scenarios, and introduce security encryption technology and consensus algorithm mechanism from blockchain technology;

[0048] Step 3: Construct specific safety operation mechanisms, including sensor data recording, data display and monitoring, actuator control, and other operations;

[0049] Step 4: Analyze and evaluate the design's operational methods from the perspectives of safety and timeliness.

[0050] In one specific embodiment of the present invention, the various steps of the present invention will be described in more detail.

[0051] like Figure 2 The diagram shows the established industrial IoT architecture based on blockchain technology. For the implementation of the blockchain service layer, a blockchain server is configured on the Go-Ethereum platform, written in Go. Considering the security requirements of industrial processes, the industrial IoT blockchain is designed as a private chain on an isolated network. The Solidity-based development kit Truffle is used to compile and deploy the smart contract, whose functions are shown in Table 1. The smart contract becomes functional when successfully deployed on all nodes in the network. Furthermore, Web3.js is used to provide an RPC interface for blockchain nodes to connect to the smart contract. Web3.js also provides an HTTP interface for users to interact directly with the smart contract through distributed applications (DApps). The consensus algorithm PoA, written in Go, is deployed on the blockchain to verify the time taken to seal blocks.

[0052] Table 1

[0053]

[0054] like Figure 3 As shown, the sensor data recording process first collects data from the sensors connected to the corresponding light nodes and applies to upload the sensor data according to the sensor data recording function; the smart contract checks whether the sensor ID exists in the sensor registration list; if all exist, the light node is allowed to initiate a transaction containing encrypted sensor data; the blockchain verifies the transaction based on PoA consensus and seals it into a block.

[0055] like Figure 4 As shown, the data display and monitoring functions allow all users to request access to sensor data stored on the blockchain; the smart contract checks the user's ID and verifies the password based on the list of registered ordinary users and the list of registered authorized users; if correct, the blockchain will provide users with a visual display of the data through the application layer interface; users can obtain the data stored on the chain in real time and monitor for data anomalies.

[0056] like Figure 5 As shown, the executor controls the authorized user to operate the executor; the smart contract checks the authorized user's ID against the authorized user registration list and verifies the password; if correct, the blockchain will provide the authorized user with a display interface to operate the executor at the application layer; the authorized user sends control commands according to the operation requirements, and the smart contract initiates transactions involving control commands based on changes in the state values ​​in the smart contract; the blockchain verifies the transactions based on PoA consensus and seals them into a block; after the block is recorded, the full node will send encrypted control commands to the corresponding light node; the light node decrypts and executes the commands upon receiving them.

[0057] The devices used in the system are divided into three types: PCs, Raspberry Pis, and field devices (sensors, actuators), as configured in Table 2. The PCs provide blockchain services, running a number of full nodes as virtual machines. Each full node is assigned an IP address and port, and they connect to each other via an RPC interface. The Raspberry Pis are considered light nodes, representing smart IoT devices in the industrial IoT environment. Their responsibility is to send transactions to the full nodes via the RPC interface and use the Elliptic Curve Digital Signature Algorithm (ECDSA) for encryption and decryption. Specifically, the Raspberry Pi encrypts sensor data and immediately sends the transaction, decrypts received control commands, and executes those commands.

[0058] Table 2

[0059]

[0060] In this architecture, DApps provide application-layer services. They operate on a peer-to-peer network within the blockchain and depend on the specific functions defined in smart contracts. Due to their distributed nature, they do not require a dedicated communication server to transmit information or a central database to track data. They provide users with a visual front-end application; through an HTTP interface, users can monitor data or send commands directly by interacting with the DApp.

[0061] Based on this, we implemented a blockchain-based industrial IoT operation architecture. Blocks storing operation information are sealed into the blockchain after verification by all nodes, such as... Figure 6As shown. For each block's block header, it records the Merkle root and hash value used to enhance privacy and security, full node information with verification permissions, and a timestamp for recording time. Additionally, the block body records operational information regarding sensor data and control commands.

[0062] After the successful application of blockchain technology in the Industrial Internet of Things (IIoT) architecture, real-time performance has become a key metric that needs to be evaluated in IIoT operations. The main factors affecting the real-time performance of operations can be divided into two parts: 1) the computation time from initiating a transaction to sealing a block; and 2) the computation time for light nodes to encrypt (or decrypt) data.

[0063] First, we will evaluate the computation time for sealing a block using PoA consensus. Considering the number of field devices and full nodes, we first conducted an experiment on sensor data recording. Figure 7 The box plot shown compares the execution time for recording sensor data with different numbers of sensors. The results show a positive correlation between computation time and the number of sensors and full nodes. Similarly, considering the number of actuators and full nodes, the execution time of encapsulating a control instruction block using PoA is [missing information]. Figure 8 The results show that the computation time of a block primarily depends on the number of full nodes. These results indicate that the transaction data size and the signature authentication process in PoA affect execution time performance. For comparative analysis, the computation time for sealing a block using PoW consensus mainly depends on the difficulty setting. It requires intensive computing resources, taking 10 minutes to seal a block, which is unsuitable for IIoT environments. PoA consensus addresses this issue by implementing an authentication mechanism to achieve fast block verification using limited resources. This also confirms that PoA is a more feasible choice for resource-constrained industrial IoT environments.

[0064] Next, we evaluated the computation time for ECDSA-based encryption and decryption on the light node. We conducted experiments using an 8GB Raspberry Pi, analyzing the average computation time and CPU usage percentage for encryption and decryption, as listed in Table 3. Each task was executed 200 times. The experimental results show that the encryption process for sensor data takes approximately 0.16 seconds, consuming 10% of the CPU; while the decryption process for control commands takes 0.30 seconds, consuming 12% of the CPU. Implementing ECDSA on the Raspberry Pi has a relatively minor impact on the overall operation latency, making it suitable for real-time industrial applications.

[0065] Table 3

[0066]

[0067] Real-time performance and security are another key metrics that need to be evaluated in the operation of Industrial Internet of Things (IIoT). Based on typical industrial control security incidents, it can be concluded that attackers target industrial control systems with the aim of tampering with sensor data or sending malicious control commands. Therefore, attacks on industrial operations can be categorized into three types: Attack Category 1 involves tampering with sensor data collected in light nodes; Attack Category 2 involves tampering with data transmitted between light nodes and operator stations; and Attack Category 3 involves tampering with data within the operator stations.

[0068] For comparative analysis, we will calculate the success probabilities of three types of attacks under both "with blockchain" and "without blockchain" scenarios. The attack probabilities under these two scenarios are compared as follows: Figure 9 As shown, it assumes that an attacker attempts to compromise the process of recording sensor data.

[0069] In the absence of a blockchain, these three types of attacks are considered independent and have equal chances. The probability of successfully compromising sensor data records can be divided into three parts, expressed as follows:

[0070]

[0071] This indicates that the attacker successfully hacked into the light node. The probability of data tampering corresponds to attack category 1, where the probability of successfully hacking into a light node is independent, denoted as... ( ). express The probability of communication data between a light node and an operator station being tampered with corresponds to attack category 2. For each communication channel... The probability of injecting fake data is independent, expressed as ( ). This represents the probability that an attacker can exploit the vulnerability to compromise the operations station, corresponding to attack category 3. Therefore, the overall probability of being attacked "without blockchain" can be expressed as:

[0072]

[0073] Similarly, in the case of "blockchain," the probability of successfully hacking into sensor data records can be represented by three types of attacks:

[0074]

[0075] For a successful attack category 1, This indicates that the attackers not only want to intrude... A light node, and it still needs to steal The key information pairs of each light node, where This represents the probability of stealing the light node key, with each process considered independent. For attack category 2, Indicates alteration The probability of communication data between light nodes and operator stations based on full nodes. The total number of communication channels is... The probability of injecting fake data into each channel is independent, denoted as... Because at least... To verify the signature using a full node, an attacker would need to compromise at least [number missing]. A single transmission channel is required for success. Furthermore, it requires theft. A pair of key information is used to encrypt the tampered data, and the probability is expressed as: For attack category 3, This represents the probability that an operator station based on a full node will be compromised. The formula indicates that an attacker should at least [become compromised / infiltrated]... Each full node and steals the corresponding... A key pair can be used to manipulate most of the verification process. The overall probability of being compromised in the "blockchain" scenario can be expressed as:

[0076]

[0077] Figure 10 It describes the results of the safety performance, depicting the probabilistic trends of the two scenarios. In the simulation, the variables are... , , Settings Within the range, and set exist Within this scope, these variables are defined based on the difficulty of the attack. From Figure 10 It is clear that the probability of a successful attack with a blockchain decreases continuously with the increase in the number of full nodes, significantly lower than the probability without a blockchain. Simultaneously, the increase in light nodes in the system also reduces the probability of successful data tampering. This means that a blockchain-based industrial IoT architecture outperforms ordinary architectures in terms of security. However, according to... Figure 7 and Figure 8 As the number of full nodes increases, the additional signature authentication process degrades the architecture's real-time performance. Therefore, it is necessary to determine an appropriate number of nodes to meet the real-time and security requirements of practical applications.

[0078] The above examples are merely specific embodiments of the present invention. Obviously, the present invention is not limited to the above embodiments and many variations are possible. All variations that can be directly derived or conceived by those skilled in the art from the disclosure of the present invention should be considered within the scope of protection of the present invention.

Claims

1.A method for designing an operation architecture of security and privacy enhancement for industrial Internet of Things based on blockchain technology, characterized in that, Includes the following steps: (1) Establish an industrial Internet of Things (IIoT) architecture based on blockchain technology, which includes a three-layer architecture: industrial field layer, blockchain service layer, and application layer; (2) Establish a blockchain network suitable for industrial IoT scenarios based on the industrial IoT architecture, and introduce security encryption technology and consensus algorithm mechanism in blockchain technology; The consensus algorithm in step (2) is as follows: the PoA consensus algorithm is used to generate and verify blocks. There are N full nodes in the blockchain participating in the verification of blocks. Blocks are created in rounds, and each full node is allowed to propose a block in N rounds. In a specific round of a full node, it records the transaction into the block and signs the block with its private key. The signature is stored in the block header and broadcast to other validators for signature verification. Only after more than N / 2+1 full nodes have successfully verified the block can it be recorded in the blockchain and updated on all full nodes in the blockchain. (3) Design custom smart contracts; And build specific security operation mechanisms in the blockchain network based on the relevant functions of custom smart contracts; Step (3) specifically includes: designing a custom smart contract and deploying the smart contract on all nodes of the blockchain; the custom smart contract includes 7 basic functions: 1) Sensor registration function, which records trusted sensors in the industrial IoT in a list form; 2) Actuator registration function, which records trusted actuators in the industrial IoT in a list form; 3) Ordinary user registration function, which records ordinary authorized users in the industrial IoT in a list form; 4) Authorized user registration function, which records authorized users in the industrial IoT in a list form; 5) Sensor data recording function, which records sensor data uploaded by light nodes; 6) Data display and supervision function, which allows ordinary users and authorized users to obtain sensor data and supervise it; 7) Actuator control function, which allows authorized users to control actuators; The sensor data recording process first collects data from the sensors connected to the corresponding light nodes and applies to upload the sensor data according to the sensor data recording function; the smart contract checks whether the sensor ID exists in the sensor registration list; when all sensor IDs are detected to exist, the light node is allowed to initiate a transaction containing encrypted sensor data; the blockchain verifies the transaction based on the consensus algorithm and seals it into a block; The data display and monitoring functions allow all users to request access to sensor data stored on the blockchain; the smart contract checks the user's ID and verifies the password based on the list of registered ordinary users and the list of registered authorized users; after the password is verified correctly, the blockchain will provide the user with a visual display of the data through the application layer interface; users can obtain the data stored on the chain in real time and monitor for data anomalies. The actuator controls the authorized user to operate the actuator; the smart contract checks the authorized user's ID based on the authorized user registration list and verifies the password; when the password is verified correctly, the blockchain will provide the authorized user with a display interface for operating the actuator at the application layer; the authorized user sends control commands according to the operation requirements, and the smart contract initiates a transaction involving the control commands; the blockchain verifies the transaction based on the consensus algorithm and seals it into a block; after the block is recorded, the full node will send encrypted control commands to the corresponding light node; the light node decrypts and executes the commands upon receiving them. (4) Analyze and evaluate the safety operation mechanism from the aspects of safety and timeliness to determine the industrial IoT architecture that meets the requirements; step (4) specifically includes: (4.1) Real-time performance evaluation. The main factors affecting the real-time performance of operations are divided into two parts: 1) The computation time from initiating a transaction to sealing a block using the consensus algorithm. Specifically, the computation time required for the consensus algorithm to seal a block is evaluated by considering different numbers of field devices and full nodes when performing related operations; 2) The computation time for light nodes to encrypt or decrypt data. Specifically, the computation time required for light nodes to encrypt and decrypt data based on ECDSA is evaluated. (4.2) Security index assessment: Simulate the process of an attacker attempting to intrude into the recorded sensor data. The attacks are divided into the following three categories: 1) tampering with the sensor data collected in the light node, 2) tampering with the data transmitted between the light node and the operator station, and 3) tampering with the data in the operator station. Calculate the success probability of the three types of attacks under the conditions of "with blockchain" and "without blockchain" to assess its security index. In the case of "with blockchain", the operator station is a full blockchain node network, and in the case of "without blockchain", it is a central host. (4.3) Based on the requirements of real-time performance and security indicators, determine the industrial Internet of Things architecture that meets the requirements of real-time performance and security. 2.The method of claim 1, wherein, In step (1), the industrial field layer includes various types of sensors and actuators. Each sensor or actuator is connected to at least one microcomputer. The microcomputer has direct control and data acquisition authority over each sensor or actuator. The microcomputer connected to the sensor is responsible for transmitting the sensor data to the blockchain after data encryption and preprocessing. The microcomputer connected to the controller is responsible for receiving transactions from the blockchain and performing operations after data decryption and processing. The blockchain service layer provides blockchain services for the industrial Internet of Things, provides service interfaces to the application layer, and interacts with field devices as needed. The application layer is the entry point for users to access the blockchain and perform related operations in the architecture; authenticated users can obtain visualized data and place control commands in the application layer, sending related operations to the blockchain service layer for verification in the form of transactions. 3.The method of claim 1, wherein, The specific content of establishing the blockchain network in step (2) is as follows: Establish a private blockchain to provide general blockchain services for the Industrial Internet of Things (IIoT); improve the transaction information in the private blockchain to operational information in the IIoT environment; use blocks to record operational information in the blockchain, with each block consisting of a block header and a block body; the block header records structured data of the block characteristics; and the block body records sensing and control information. Blockchain includes two types of nodes: full nodes and light nodes. A full node is a computer device with computing power and the ability to store block information. It can receive and broadcast transactions, verify them according to the corresponding consensus algorithm, and seal them into blocks. A light node is a microcomputer with limited power in this system. Due to its limited computing and storage capabilities, it does not need to store block information. Its main function is to encrypt and decrypt data. 4.The method of claim 1, wherein, The security encryption technology in step (2) is specifically as follows: The Elliptic Curve Digital Signature Algorithm (ECDSA) is used to generate public and private keys for all nodes. The public key represents the public and accessible part of the node, while the private key represents the confidential part. The SHA256 hash algorithm is then used to process the data in the transaction and generate a message digest. The message digest is encrypted with the sender's private key to generate a digital signature, which is also recorded in the transaction as proof of identity. The receiver uses the sender's public key to decrypt the digital signature and compares it with the message digest calculated using the SHA256 hash to verify its authenticity. If the result is true, the transmitted data is considered secure and intact, and has not been tampered with; otherwise, the transmitted data has been tampered with.

Images