Industrial Internet of Things hierarchical access control method and system based on block chain

Abstract

The invention provides an industrial Internet of Things hierarchical access control method and system based on a block chain. The method comprises the steps that a data owner and a data user register in the block chain and an identity authority node, and an identity sequence is obtained after verification; the data owner encrypts data by using the main private key and the identity sequence, stores the data in an out-of-chain module, and uploads related information to the block chain; and the data user applies for data access to the block chain, obtains a data ciphertext address after the judgment is passed based on an access strategy, decrypts the data by using an identity private key based on identity level verification to obtain the data, and performs integrity verification. According to the method, the authenticity and reliability of the user identity are ensured through dual verification of the block chain and the identity authority node; in the stage of acquiring the ciphertext by the data user, the illegal intrusion of the unauthorized user is further limited by using a dual protection mechanism of a data access strategy and user identity comparison, so that the confidentiality and integrity of the data are ensured, and the security and access efficiency of the industrial Internet of Things system are improved.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a blockchain-based industrial Internet of Things hierarchical access control method and system. Background Art

[0002] In the Industrial Internet of Things (IIoT) environment, data resources and data users need a clear and rigorous hierarchical access control mechanism to ensure that sensitive data is only accessed by users with corresponding permissions. The IIoT environment usually has a hierarchical management structure, and users of different levels (such as factory management, workshop management, and equipment operators) need to access data resources of different sensitivity levels according to their respective identity levels. Cross-level data access may bring great security risks and even threaten the normal operation of the entire IIoT system. At present, most of the hierarchical access control solutions based on blockchain have not fully considered the problem of identity and permission binding, and there is still a security risk of data being accessed without permission. Summary of the invention

[0003] In order to solve the above problems, the present invention proposes a blockchain-based industrial Internet of Things hierarchical access control method and system, which ensures the authenticity and reliability of user identity through dual verification of blockchain and identity authority node; in the stage where data users obtain data, the dual protection mechanism of data access strategy and user identity comparison is used to further limit the illegal intrusion of unauthorized users, thereby ensuring the confidentiality and integrity of data and improving the security and access efficiency of the industrial Internet of Things system.

[0004] In order to achieve the above object, the present invention adopts the following technical solution:

[0005] In a first aspect, the present invention provides a blockchain-based industrial Internet of Things hierarchical access control method, comprising:

[0006] The user initiates a registration request to the blockchain and the identity authority node, and obtains an identity sequence after verification; the user includes the data owner and the data user, and the identity sequence includes the first identity sequence and the second identity sequence;

[0007] The data owner uses the master private key and the first identity sequence to encrypt the data to obtain the ciphertext, sends the ciphertext to the off-chain data storage module for storage, and saves the ciphertext address it feedbacks; uploads the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain;

[0008] The data user sends a data access request to the blockchain. After verification, the blockchain feeds back the data ciphertext address to the data user. The data user obtains the data ciphertext from the off-chain data storage module based on the data ciphertext address. The identity private key is generated based on the master private key, public parameters and the second identity sequence, and the identity private key is used to decrypt the ciphertext to obtain the data, and then an integrity check is performed.

[0009] Preferably, the data sensitivity level includes three levels with increasing sensitivity, level one is general data, level two is important data, and level three is core data;

[0010] The data access policy is a mapping of a set of data sensitivity levels to identities:

[0011]

[0012] Among them, Sensitivity M is the data sensitivity level; is the identity level, obtained from the identity sequence; the data access strategy means that only the identity level is not less than Only users with the permission can access this data.

[0013] Preferably, the data user sends a data access request to the blockchain, and after verification, the blockchain feeds back the data ciphertext address to the data user, specifically including:

[0014] The blockchain obtains the identity level of the data user based on the second identity sequence Determine the identity level based on data access policy Whether the access requirements of this data are met; if the access permission is passed, the ciphertext address of the corresponding data will be fed back to the data user; otherwise, the data user will be denied access.

[0015] Preferably, the use of the identity private key to decrypt the ciphertext to obtain the data specifically includes: if the identity level of the data user is lower than the identity level of the data owner corresponding to the data, the identity private key cannot decrypt the ciphertext and the data acquisition fails.

[0016] Preferably, the integrity check includes:

[0017] The data user calculates the hash value HM' of the acquired data and compares it with the hash value HM of the data uploaded by the data owner. If they are the same, it means the data is normal; otherwise, it means the data is damaged.

[0018] In a second aspect, the present invention provides an industrial Internet of Things hierarchical access control system based on blockchain, comprising:

[0019] The data owner is configured to send a registration request to the blockchain and the identity authority node, and obtain the first identity sequence after verification; encrypt the data using the master private key and the first identity sequence to obtain ciphertext, send the ciphertext to the off-chain data storage module for storage, and save the ciphertext address fed back; upload the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain;

[0020] The data user is configured to send a registration request to the blockchain and the identity authority node, and obtain a second identity sequence after verification; send a data access request to the blockchain, receive the data ciphertext address fed back by the blockchain, and obtain the data ciphertext from the off-chain data storage module based on the data ciphertext address; generate an identity private key based on the master private key, public parameters and the second identity sequence, use the identity private key to decrypt the ciphertext, obtain the data, and perform integrity verification;

[0021] The blockchain is configured to verify the user's registration information and distribute identity identification; receive the ciphertext address sent by the off-chain data storage module; receive the data access request of the data user, and feedback the corresponding ciphertext address to the data user according to the data access policy;

[0022] The off-chain data storage module is configured to receive the ciphertext sent by the data owner and generate a ciphertext address;

[0023] The identity authority node is configured to save the master public key and master private key in the system and generate the corresponding identity sequence based on the user identity.

[0024] Preferably, the industrial Internet of Things system generates a master public key, a master private key and public parameters based on the security factor, and publishes them on the chain.

[0025] In a third aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps in the blockchain-based industrial Internet of Things hierarchical access control method described in the first aspect.

[0026] In a fourth aspect, the present invention provides a computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps in the blockchain-based industrial Internet of Things hierarchical access control method described in the first aspect are implemented.

[0027] Compared with the prior art, the present invention has the following beneficial effects:

[0028] 1. The present invention uses an identity-based hierarchical encryption method to implement hierarchical access control for the Industrial Internet of Things, ensuring that users of different identity levels can only access data consistent with their permissions, effectively preventing data leakage, thereby greatly improving the security of the Industrial Internet of Things and avoiding data security risks caused by unauthorized access.

[0029] 2. The present invention uses blockchain to replace traditional third-party authoritative agencies, avoiding problems such as centralization and single point failure; information such as identity sequences and ciphertext addresses are stored on the chain, and the tamper-proof nature of blockchain is used to ensure the credibility of key information; smart contracts are used to automatically determine access rights, ensuring the fairness of access rights determination and enhancing the security and credibility of the entire access control process.

[0030] 3. The present invention combines the latest data classification standards, classifies the sensitivity of IIoT data, and formulates corresponding access policies to ensure that IIoT data of different levels can be properly protected throughout its entire life cycle; in addition, the present invention supports a hierarchical key management structure, which is particularly suitable for a multi-level user system in an IIoT environment, and provides a secure hierarchical access control solution for the IIoT environment.

[0031] Advantages of additional aspects of the present invention will be given in part in the following description, and in part will become obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The accompanying drawings constituting a part of the present invention are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their description are used to explain the present invention but do not constitute a limitation of the present invention.

[0033] Figure 1 A main flow chart of a blockchain-based industrial Internet of Things hierarchical access control method provided by an embodiment of the present invention;

[0034] Figure 2 A detailed flow chart of a blockchain-based industrial Internet of Things hierarchical access control method provided by an embodiment of the present invention;

[0035] Figure 3 A structural diagram of an industrial Internet of Things hierarchical access control system based on blockchain provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0036] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0037] Embodiment 1

[0038] Technical term explanation

[0039] 1. Hierarchical Identity-Based Encryption (HIBE) is an identity-based encryption method that extends the capabilities of IBE (identity encryption) by introducing a hierarchical structure. In HIBE, the user's identity information is organized into a tree structure, in which each user or node is associated with its parent node and child nodes. This hierarchical structure enables HIBE to achieve hierarchical management and access control of data. In HIBE, data is designed to be divided into hierarchical visibility, allowing users or nodes in the upper layer to view the data of users or nodes in the lower layer, but users or nodes in the lower layer cannot view data in the upper layer.

[0040] like Figure 1 As shown, this embodiment discloses a blockchain-based industrial Internet of Things hierarchical access control method, comprising the following steps:

[0041] S1: The user initiates a registration request to the blockchain and the identity authority node, and obtains an identity sequence after verification; the user includes the data owner and the data user, and the identity sequence includes the first identity sequence and the second identity sequence;

[0042] S2: The data owner uses the master private key and the first identity sequence to encrypt the data to obtain the ciphertext, sends the ciphertext to the off-chain data storage module for storage, and saves the ciphertext address it feedbacks; uploads the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain;

[0043] S3: The data user sends a data access request to the blockchain. After verification, the blockchain feeds back the data ciphertext address to the data user. The data user obtains the data ciphertext from the off-chain data storage module based on the data ciphertext address. The identity private key is generated based on the master private key, public parameters and the second identity sequence, and the ciphertext is decrypted using the identity private key to obtain the data, and an integrity check is performed.

[0044] Next, combine Figure 2 , a blockchain-based industrial Internet of Things hierarchical access control method disclosed in this embodiment is described in detail.

[0045] 1. Preparation

[0046] 1.1 Smart contract deployment: contractSetup{accessVerifycontract}

[0047] The blockchain is initialized and the access rights determination contract is deployed.

[0048] The access right determination contract runs a program on the blockchain to determine the access rights according to the access policy P M Automatically determine access rights.

[0049] 1.2 Common parameter generation: GlobalSetup(1 λ ){GPK,MSK,MPK}

[0050] The industrial Internet of Things system inputs the security parameter λ to generate the system master public key MPK, master private key MSK, and public parameter GPK=<G1,G2,g,e> , and published on the chain, where G1 and G2 are two cyclic groups of order q, the generator g∈G1, and e:G1×G2→G2 is a bilinear mapping.

[0051] 1.3 Identity authority generation: IASetup → Identity IA

[0052] The nodes on the chain use the consensus algorithm to elect a node as the identity authority IA. IA is responsible for storing the master public key MPK and the master private key MSK in the system, and generates the corresponding identity sequence for the system user based on the user identity. As the identity root node in the entire system, the identity sequence of IA is

[0053] 1.4 User registration: userGen(GPK,ID DO / DU )

[0054] The data owner DO sends the public parameter GPK and identity information ID to the blockchain DO Apply for user registration. After successful registration, the blockchain returns the data owner DO's global unique identity, the first identity U DO =Hash(ID DO ||timeStamp DO ), where timeStamp DO The timestamp of the registration for the data owner DO.

[0055] In this embodiment, the addition of the timestamp greatly enhances the uniqueness of the identity and reduces the risk of the identity being repeated or used fraudulently. At the same time, it can also prevent data tampering and forgery to a certain extent. Once the data is recorded on the blockchain, its timestamp and related information are permanently saved and cannot be tampered with or deleted. This helps to ensure the authenticity and integrity of the data and improve the credibility and security of the blockchain system.

[0056] Data user DU sends public parameters GPK and identity information ID to the blockchain DU Apply for user registration. After successful registration, the blockchain returns the data user DU's global unique identity and the second identity U DU =Hash(ID DU ||timeStampDU ), where timeStamp DU The timestamp of registration for the data user DU.

[0057] 1.5 Identity Registration

[0058] 1.5.1 Initiate identity registration application: idenRequest (DO / DU→IA)

[0059] The data owner DO sends his identity U to IA DO Submit identity registration application; data user DU sends his / her identity U to IA DU Submit an identity registration application.

[0060] 1.5.2 Identity sequence generation: idenGen(U DO / DU )→{Identity DO / DU}

[0061] After the identity authority IA receives the identity registration application from the data owner DO, it generates the corresponding first identity sequence based on its identity identifier. And return it to the data owner DO.

[0062] The identity sequence is a set of identities from the lowest To your own identity level When determining access rights, the highest identity level, that is, the user's own identity level, is used. shall prevail.

[0063] After receiving the identity application from the data user DU, IA DU To generate the corresponding second identity sequence And return to the data user DU.

[0064] 1.6Key Generation keyGen (GPK, MSK, Identity DO / DU )→{SK DO / DU}

[0065] The data owner DO enters his identity sequence Identity DO , master private key MSK, public parameter GPK to generate its identity private key SK DO ;

[0066] Similarly, the data user DU enters its identity sequence Identity DU , master private key MSK, public parameter GPK to generate its identity private key SK DU .

[0067] It should be noted that the users in the present invention are divided into data owners and data users, and multiple users are involved, and they are all registered according to the above method. So far, the preparation work has been completed.

[0068] (II) Data owner uploads data

[0069] 2.1 Encrypt and upload data

[0070] 2.1.1 Encrypted Data: Encrypt(M,Identity DO ,MPK)→CT

[0071] The data owner DO selects the data plaintext M that he wants to share and uses his own identity sequence Identity DO The data plaintext M is encrypted with the master public key MPK to obtain the ciphertext CT.

[0072] 2.1.2 Upload data: CTSend (CT) DO→DB

[0073] After encryption is completed, the data owner DO sends the ciphertext CT to the off-chain data storage module DB for storage.

[0074] 2.2 Return the ciphertext address: CTAddressGen(CT)→CTAddress

[0075] After receiving the ciphertext CT, the off-chain data storage module DB generates the corresponding ciphertext address CTAddress and returns it to the data owner DO and the blockchain. The data owner DO receives and saves the ciphertext address CTAddress to facilitate viewing the data uploaded by himself; the blockchain saves the ciphertext address CTAddress on the chain to achieve trusted storage of the ciphertext address.

[0076] 2.3 Data information released on the chain:

[0077] uploadData(HM,MetaData,Identity DO ,Sensitivity M ,P M ) DO→BC

[0078] The data owner DO first calculates the hash value HM = hash(M) of the data plaintext M, and then converts its own identity sequence Identity DO , metadata MetaData, data hash value HM, data sensitivity level Sensitivity M = (primary / secondary / tertiary), access policy P of data M M Upload to the blockchain together and publish data information.

[0079] According to the data classification standard, data is divided into three levels: level one is general data, level two is important data, and level three is core data. Access Policy P M is a mapping from data sensitivity level to identity, P M =(Sensitivity M →L vn ), meaning that only those with a status level not less than L vn Only users with can access this data.

[0080] In this embodiment, by dividing different access levels according to the sensitivity of the data, the security and confidentiality of the data can be ensured. As a function that maps sensitivity to identity, the access policy can accurately control which users can access which data. This fine-grained control is conducive to preventing unauthorized access while ensuring that users who need to access the data can obtain the necessary permissions. This mapping relationship not only improves the security of the data, but also improves the efficiency of data management.

[0081] (III) Data users accessing data

[0082] 3.1 Data user initiates access request AccessRequest (MetaData, Identity DU ) DU→BC

[0083] The data user DU determines the data plaintext M that he needs to obtain by querying the data information published on the blockchain, and sends an access request AccessRequest to the blockchain.

[0084] 3.2 Access permission determination: policyMatch(AccessRequest)→True / False

[0085] After receiving the access request AccessRequest, the blockchain triggers the access right determination contract accessVerifycontract. The access right determination contract searches for the identity sequence Identity of the data user DU DU , according to the identity sequence of DU, obtain its identity level L vDU , and then judge its identity level L vDU Whether the access requirements of this data are met. If the access permission is passed, the ciphertext address CTAddress of the corresponding data is returned to the data user DU; otherwise, "Access Denied" is returned, and the data user DU is denied access.

[0086] 3.3 Get Data

[0087] 3.3.1 Get ciphertext data: getData(CTAddress)→CT

[0088] The data user DU searches for the corresponding ciphertext CT from the off-chain data storage module DB according to the ciphertext address CTAddress.

[0089] 3.3.2 Decrypt ciphertext: DecryptCT(CT,SK DU )→M

[0090] Data user DU uses his own identity private key SK DU Decrypt the ciphertext CT to obtain the data plaintext M. If the identity level of the data user DU is lower than the identity level of the data owner DO, then the identity key SK DU Unable to decrypt the ciphertext, failed to obtain data.

[0091] In addition to setting access policies when data users obtain plain text data, this embodiment also sets identity level verification during the ciphertext decryption stage, requiring that the data user's identity level must reach or exceed the data owner's identity level before decrypting the data, which can ensure that sensitive data will not be accessed by unauthorized or insufficiently qualified users; the dual data protection mechanism formed can effectively prevent data leakage and abuse, and protect the privacy and rights of data owners. At the same time, identity level verification also helps to enhance the traceability of data. Since only users who meet the identity level requirements can decrypt the data, the identity information related to the decryption operation can be recorded for tracing and auditing when necessary, thereby ensuring the legitimacy and integrity of the data and providing strong support for the subsequent use of the data.

[0092] 3.3.3 Data integrity check: hashVerify(HM',HM)→True / False

[0093] After the data user DU obtains the data plaintext M, he first calculates HM'=hash(M), and then compares HM' with HM published by the data owner DO on the blockchain to see if they are equal. If HM'≠HM, it indicates that the data is damaged; if HM'=HM, the data can be used normally.

[0094] This embodiment uses blockchain to replace the traditional third-party management agency and stores the key parameters in the encryption and decryption process on the chain, which not only ensures the credibility of key information, but also effectively avoids the single point failure problem caused by a third party. Through the access right determination contract, the access right determination is automatically executed, further enhancing the credibility of the access process. At the same time, the identity-based hierarchical encryption algorithm is adopted to realize encrypted access to data. Users with different identities have different access rights, thereby realizing safe and reliable hierarchical access control.

[0095] This embodiment implements hierarchical access control for the industrial Internet of Things based on identity-based hierarchical encryption, ensuring that users of different identity levels can only access data consistent with their permissions, effectively preventing data leakage, thereby greatly improving data security and avoiding data security risks caused by unauthorized access.

[0096] Embodiment 2

[0097] This embodiment provides an industrial Internet of Things hierarchical access control system based on blockchain, such as Figure 3 As shown, including:

[0098] The data owner is configured to send a registration request to the blockchain and the identity authority node, and obtain the first identity sequence after verification; encrypt the data using the master private key and the first identity sequence to obtain ciphertext, send the ciphertext to the off-chain data storage module for storage, and save the ciphertext address fed back; upload the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain;

[0099] The data user is configured to send a registration request to the blockchain and the identity authority node, and obtain a second identity sequence after verification; send a data access request to the blockchain, receive the data ciphertext address fed back by the blockchain, and obtain the data ciphertext from the off-chain data storage module based on the data ciphertext address; generate an identity private key based on the master private key, public parameters and the second identity sequence, use the identity private key to decrypt the ciphertext, obtain the data, and perform integrity verification;

[0100] The blockchain is configured to verify the user's registration information and distribute identity identification; receive the ciphertext address sent by the off-chain data storage module; receive the data access request of the data user, and feedback the corresponding ciphertext address to the data user according to the data access policy;

[0101] The off-chain data storage module is configured to receive the ciphertext sent by the data owner and generate a ciphertext address;

[0102] The identity authority node is configured to save the master public key and master private key in the system and generate the corresponding identity sequence based on the user identity.

[0103] As a further implementation method, the industrial Internet of Things system generates a master public key, a master private key and public parameters based on the security factor and publishes them on the chain.

[0104] Embodiment 3

[0105] This embodiment provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps in the blockchain-based industrial Internet of Things hierarchical access control method as described in the above-mentioned embodiment 1 are implemented.

[0106] Embodiment 4

[0107] This embodiment provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, the steps in the industrial Internet of Things hierarchical access control method based on blockchain as described in the first embodiment are implemented.

[0108] The steps or modules involved in the above embodiments 2 to 4 correspond to those in embodiment 1. For the specific implementation, please refer to the relevant description of embodiment 1. The term "computer-readable storage medium" should be understood as a single medium or multiple media including one or more instruction sets; it should also be understood to include any medium that can store, encode or carry an instruction set for execution by a processor and enable the processor to execute any method in the present invention.

[0109] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A hierarchical access control method for industrial Internet of Things based on blockchain, characterized in that: include: The user initiates a registration request to the blockchain and the identity authority node, and obtains an identity sequence after verification; the user includes the data owner and the data user, and the identity sequence includes the first identity sequence and the second identity sequence; The data owner uses the master private key and the first identity sequence to encrypt the data to obtain the ciphertext, sends the ciphertext to the off-chain data storage module for storage, and saves the ciphertext address it feedbacks; uploads the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain; The data user sends a data access request to the blockchain. After verification, the blockchain feeds back the data ciphertext address to the data user. The data user obtains the data ciphertext from the off-chain data storage module based on the data ciphertext address. The identity private key is generated based on the master private key, public parameters and the second identity sequence, and the identity private key is used to decrypt the ciphertext to obtain the data, and then an integrity check is performed.

2. The method for hierarchical access control of industrial Internet of Things based on blockchain as claimed in claim 1, characterized in that: The data sensitivity level includes three levels with increasing sensitivity, level one is general data, level two is important data, and level three is core data; The data access policy is a mapping of a set of data sensitivity levels to identities: Among them, Sensitivity M is the data sensitivity level; is the identity level, obtained from the identity sequence; the data access strategy means that only the identity level is not less than Only users with the permission can access this data.

3. The method for hierarchical access control of industrial Internet of Things based on blockchain as claimed in claim 1, characterized in that: The data user sends a data access request to the blockchain. After verification, the blockchain feeds back the data ciphertext address to the data user, specifically including: The blockchain obtains the identity level of the data user based on the second identity sequence Determine the identity level based on data access policy Whether the access requirements of this data are met; if the access permission is passed, the ciphertext address of the corresponding data will be fed back to the data user; otherwise, the data user will be denied access.

4. The method for hierarchical access control of industrial Internet of Things based on blockchain as claimed in claim 1, characterized in that: The use of the identity private key to decrypt the ciphertext to obtain the data specifically includes: if the identity level of the data user is lower than the identity level of the data owner corresponding to the data, the identity private key cannot decrypt the ciphertext and the data acquisition fails.

5. The method for hierarchical access control of industrial Internet of Things based on blockchain as claimed in claim 1, characterized in that: The integrity check includes: The data user calculates the hash value HM' of the acquired data and compares it with the hash value HM of the data uploaded by the data owner. If they are the same, it means the data is normal; otherwise, it means the data is damaged.

6. A blockchain-based industrial Internet of Things hierarchical access control system, characterized in that: include: The data owner is configured to send a registration request to the blockchain and the identity authority node, and obtain the first identity sequence after verification; encrypt the data using the master private key and the first identity sequence to obtain ciphertext, send the ciphertext to the off-chain data storage module for storage, and save the ciphertext address fed back; upload the first identity sequence, metadata, data hash value, data sensitivity level and data access policy to the blockchain; The data user is configured to send a registration request to the blockchain and the identity authority node, and obtain a second identity sequence after verification; send a data access request to the blockchain, receive the data ciphertext address fed back by the blockchain, and obtain the data ciphertext from the off-chain data storage module based on the data ciphertext address; generate an identity private key based on the master private key, public parameters and the second identity sequence, use the identity private key to decrypt the ciphertext, obtain the data, and perform integrity verification; The blockchain is configured to verify the user's registration information and distribute identity tags; Receive the ciphertext address sent by the off-chain data storage module; Receive data access requests from data users, determine access rights based on data access policies, and feedback the corresponding ciphertext address to data users with access rights; The off-chain data storage module is configured to receive the ciphertext sent by the data owner and generate a ciphertext address; The identity authority node is configured to save the master public key and master private key in the system and generate the corresponding identity sequence based on the user identity.

7. The industrial Internet of Things hierarchical access control system based on blockchain as claimed in claim 6, characterized in that: The industrial Internet of Things system generates a master public key, a master private key and public parameters based on the security factor and publishes them on the chain.

8. The industrial Internet of Things hierarchical access control system based on blockchain as claimed in claim 6, characterized in that: The data sensitivity level includes three levels with increasing sensitivity, level one is general data, level two is important data, and level three is core data; The data access policy is a mapping of a set of data sensitivity levels to identities: Among them, Sensitivity M is the data sensitivity level; is the identity level, obtained from the identity sequence; the data access strategy means that only the identity level is not less than Only users with the permission can access this data.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by the processor, the steps in the industrial Internet of Things hierarchical access control method based on blockchain as described in any one of claims 1 to 5 are implemented.

10. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps in the industrial Internet of Things hierarchical access control method based on blockchain as described in any one of claims 1-5 are implemented.

Images