Internet of Things access control method based on attributes and reputation by using smart contract

Abstract

The invention discloses a method for realizing access control in the Internet of Things by using an intelligent contract based on attribute and reputation information. Comprising the following steps: a device and a user firstly perform Internet of Things information registration on a block chain; the block chain returns the registration information to the Internet of Things and records related information on the chain; the user interacts with the block chain to use an intelligent contract to judge whether conditions are met or not; the block chain updates the information and the reputation value of the user in the block chain through the smart contract; verifying rationality and correctness of user access control; according to the invention, the access control authority of the user can be updated by updating the attribute of the reputation value, the whole-course traceable, distributed and fine-grained access control of the resources of the Internet of Things is realized, the communication overhead of the Internet of Things is reduced, and the security and fairness of the access control of the Internet of Things are enhanced.

Description

Technical Field

[0001] This article belongs to the field of access control technology, and specifically, relates to an IoT access control method based on attributes and reputation using smart contracts. Background Art

[0002] Due to the progress of science and technology such as computers, communications and sensors and the needs of human life, the "Internet of Things" was born. The role of the Internet of Things in users' lives is increasing day by day, bringing great potential for social and economic development. However, we must also recognize that there are still many unresolved problems and challenges in the current Internet of Things technology, including security risks. Although the Internet of Things technology provides many advantages such as information interaction, autonomy and intelligence, its security control mechanism is still immature and vulnerable to various malicious attacks. In this environment, maintaining the access control security of IoT devices is a huge challenge.

[0003] Security solutions for IoT environments are becoming increasingly important, aiming to ensure that users' behavior is trustworthy and focusing on preventing legitimate users from making mistakes and illegal operations. With development, traditional networks are gradually evolving into trusted networks, which monitor users' access behavior in real time, assess risks and operation results, and control abnormal behavior in a timely manner. Access control is a common method used to ensure the confidentiality of data in device storage and transmission, and to allow legally authorized users and devices to access services and data. In addition, blockchain technology can also be applied to IoT environments to help ensure the legitimacy and authorized access of users and devices.

[0004] Therefore, only by continuously improving security mechanisms such as trusted networks and access control can we better ensure the credibility of users' operations in the IoT environment, prevent risks and illegal behaviors, and improve the overall security of the IoT system. However, previous studies have all been attempts at a single blockchain, and no dual-chain structure has been suggested to study access control. In addition, the impact of unauthorized behavior of legitimate users on the access control system has not been considered. Traditional access control will also be a huge burden on the communication overhead of the IoT. Summary of the invention

[0005] In view of the above problems, the present invention proposes an IoT access control method based on attributes and reputation using smart contracts. The method can realize fully traceable, distributed, and fine-grained access control of IoT resources, while reducing the communication overhead of the IoT and enhancing the security and fairness of IoT access control.

[0006] The method for controlling access to the Internet of Things based on attributes and reputation using smart contracts of the present invention is characterized by the following steps:

[0007] Step 1: System registration: Register the user and device in the IoT and write the information into the blockchain network. After the blockchain network is registered, the user and device IDs are returned to the user and device.

[0008] Step 2: Identity authentication application: The user initiates an authentication request for the device, and the device gateway processes the authentication request. The device gateway authenticates the user's attributes to the blockchain, and writes the user's authentication record to the blockchain network according to its own access policy. At the same time, it compares whether the reputation value meets the standard, and then the user can obtain the authentication record;

[0009] Step 3: Access application: The user sends an access request to the device gateway, and the IoT device gateway performs local verification and access operations on the authentication record;

[0010] Step 4: Reputation value update: The IoT device gateway writes the user's access record to the blockchain network and updates the user's reputation value based on the access record. The user obtains the updated reputation value and writes it into the blockchain.

[0011] In the method for controlling access to the Internet of Things based on attributes and reputation using smart contracts of the present invention, in step 1, the specific steps of the system registration phase are:

[0012] The user is registered as U1 on the blockchain, and the device is registered as D1 on the blockchain; user U1 obtains the corresponding identification ID and writes the corresponding feature information, and device D1 also obtains the corresponding identification ID and writes the corresponding feature information; device D1 also needs to set corresponding attribute access restrictions; user D1 will also initialize the reputation value to 60.

[0013] In the IoT access control method based on attributes and reputation using smart contracts of the present invention, in step 2, the specific steps of the identity authentication application stage are:

[0014] User U1 first applies for identity authentication to device D1 through the blockchain network; the request is recognized and processed by the smart contract of identity authentication and reputation value on the blockchain network. If successful, the access rights will be written into the blockchain ledger, and the result of successful authentication will be returned to user U1 at the same time; if the identity authentication recognition of the smart contract fails, the authentication of the user's identity will be rejected, and the result of failed authentication will be returned to user U1 at the same time.

[0015] In the IoT access control method based on attributes and reputation using smart contracts of the present invention, in step 3, the specific steps of the access application stage are:

[0016] User U1 sends an access control request to device D1 through the blockchain network; after receiving the request, the blockchain network will first use the identity authentication query smart contract to first determine the authentication result. If the access behavior is normal, the result C will be returned; if it is abnormal, the result S1 will be returned; the blockchain will then use the reputation value query smart contract to first determine the reputation value status result. If the reputation value is normal, the result C will be returned; if it is abnormal, the result S2 will be returned; the blockchain will then use the results α1 and β2 to grant the user the corresponding access rights A, and write them into the blockchain network at the same time.

[0017] In the IoT access control method based on attributes and reputation using smart contracts of the present invention, in step 4, the specific steps of the reputation value update phase are:

[0018] The IoT device gateway writes the user's access record into the blockchain network and updates the user's reputation value based on the access record. The user obtains the updated reputation value and writes it into the blockchain. During the access application process, the user's reputation value Rep i will be updated synchronously based on the authentication result.

[0019] Rep0 is the initial reputation value, so the reputation value update formula is

[0020]

[0021] S1: The user's access behavior is judged as illegal access behavior;

[0022] S2: The user's access behavior is judged as unauthorized access behavior;

[0023] C: The user's access behavior is judged to be normal access behavior.

[0024] The beneficial effects of the present invention are as follows: the method for controlling the Internet of Things access based on attributes and reputation using smart contracts of the present invention, first, performs the Internet of Things registration of users and devices, and writes the information into the blockchain network, after the blockchain network is registered, returns the IDs of the user and the device to the user and the device; then, the user initiates an authentication request for the device, the device gateway processes the authentication request, the device gateway performs authentication processing on the user's attributes to the blockchain, and writes the user's authentication record into the blockchain network according to its own access policy, and at the same time compares whether the reputation value meets the standard, and then the user can obtain the authentication record; then, the user issues an access request to the device gateway, and the Internet of Things device gateway performs local verification and access operations on the authentication record; finally, the Internet of Things device gateway writes the user's access record into the blockchain network, and updates the user's reputation value according to the access record, the user obtains the updated reputation value and writes it into the blockchain; the fully traceable, distributed, and fine-grained access control of Internet of Things resources is realized, while reducing the communication overhead of the Internet of Things and enhancing the security and fairness of Internet of Things access control. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a system model diagram of an IoT access control method based on attributes and reputation using smart contracts provided by an embodiment of the present invention;

[0026] Figure 2 It is a schematic diagram of an access strategy flow of an IoT access control method based on attributes and reputation using smart contracts provided by an embodiment of the present invention;

[0027] Figures 3 to 6 This is a pseudo code implementation diagram of the access control method in the Internet of Things implemented by the smart contract provided by the embodiment of the present invention.

[0028] Figure 7 It is a flow chart of an IoT access control method based on attributes and reputation using smart contracts provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0030] In order to illustrate the technical solution of the present invention, a specific embodiment is provided below for illustration.

[0031] First, Figure 1 As shown, the IoT access control method based on attributes and reputation using smart contracts provided by the present invention is based on Figure 1 The system shown includes a user (User, U), a device (Device, D), and a blockchain (BlockChain).

[0032] The specific functions of these three entities are as follows:

[0033] User: In the Internet of Things, users have their own unique attributes and behaviors, and different behaviors have different impacts on access behavior.

[0034] Device: Each device has different attribute access requirements. Different access behaviors of different users require an indicator to systematically measure whether they are malicious access behaviors.

[0035] Blockchain: Combine blockchain with access control by taking advantage of the characteristics of blockchain that cannot be tampered with, is open and transparent, and the characteristics of smart contracts that do not require intermediaries, are self-verified, and automatically execute contract terms. This method is implemented on the basis of blockchain Hyperledger Fabric. Use fabric's unique smart contracts to implement access control for the Internet of Things

[0036] Based on the above system, combined with Figure 2 As shown, this embodiment uses an IoT access control method based on attributes and reputation using smart contracts, including the following steps:

[0037] Step S1: System registration

[0038] This step is mainly to initialize the system parameters. The specific process is as follows:

[0039] S11: The user is registered on the blockchain as U1, and the device is registered on the blockchain as D1.

[0040] S12: User U1 simultaneously obtains the corresponding identification ID and writes the corresponding feature information, and device D1 also obtains the corresponding identification ID and writes the corresponding feature information.

[0041] S13: The device D1 also needs to set corresponding attribute access restrictions.

[0042] S14: User D1 will also initialize the reputation value to 60.

[0043] Step S2: Identity authentication application

[0044] This step is mainly about the device identifying the user. The specific process is as follows:

[0045] S21: User U1 first applies for identity authentication to device D1 through the blockchain network.

[0046] S22: The request is recognized and processed by the smart contract of identity authentication and reputation value on the blockchain network. If successful, the access rights will be written into the blockchain ledger, and the result of successful authentication will be returned to user U1 at the same time.

[0047] S23: If the identity authentication of the smart contract fails, the authentication of the user's identity is rejected, and the result of the authentication failure is returned to the user U1.

[0048] Step S3: Access application

[0049] This step mainly focuses on the user's access control process for the device. The specific process is as follows:

[0050] S31: User U1 issues an access control request to device D1 through the blockchain network.

[0051] S32: After receiving the request, the blockchain network will first use the identity authentication query smart contract to determine the authentication result. If the access behavior is normal, the result C will be returned; if it is abnormal, the result S1 will be returned.

[0052] S33: The blockchain will then use the reputation query smart contract to first determine the reputation status result. If the reputation value is normal, result C will be returned; if it is abnormal, result S2 will be returned.

[0053] S34: The blockchain then uses the results α1 and β2 to grant the user the corresponding access rights A, and writes them into the blockchain network at the same time.

[0054] Step S4: Credit value update

[0055] This step is mainly to update the user's reputation value. The specific process is as follows:

[0056] S41: The IoT device gateway writes the user's access record into the blockchain network and updates the user's reputation value based on the access record. The user obtains the updated reputation value and writes it into the blockchain.

[0057] S42: During the access application process, the user's reputation value Repi will be updated synchronously according to the authentication result.

[0058]

[0059] S43: Rep0 is the initial reputation value, so the reputation value update formula is

[0060]

[0061] S1: The user's access behavior is judged as illegal access behavior;

[0062] S2: The user's access behavior is judged as unauthorized access behavior;

[0063] C: The user's access behavior is judged to be normal access behavior.

Claims

1. A method for IoT access control based on attributes and reputation using smart contracts, characterized in that: The steps are: Step 1: System registration: Register the user and device in the IoT and write the information into the blockchain network. After the blockchain network is registered, the user and device IDs are returned to the user and device. Step 2: Identity authentication application: The user initiates an authentication request for the device, and the device gateway processes the authentication request. The device gateway authenticates the user's attributes to the blockchain, and writes the user's authentication record to the blockchain network according to its own access policy. At the same time, it compares whether the reputation value meets the standard, and then the user can obtain the authentication record; Step 3: Access application: The user sends an access request to the device gateway, and the IoT device gateway performs local verification and access operations on the authentication record; Step 4: Reputation value update: The IoT device gateway writes the user's access record to the blockchain network and updates the user's reputation value based on the access record. The user obtains the updated reputation value and writes it into the blockchain.

2. According to claim 1, a method for IoT access control based on attributes and reputation using smart contracts is characterized in that: In step 1, the specific steps of the system registration phase are: The user is registered as U1 on the blockchain, and the device is registered as D1 on the blockchain; user U1 obtains the corresponding identification ID and writes the corresponding feature information, and device D1 also obtains the corresponding identification ID and writes the corresponding feature information; device D1 also sets corresponding attribute access restrictions; user D1 will also initialize the reputation value to 60.

3. According to claim 1, a method for IoT access control based on attributes and reputation using smart contracts is characterized in that: In step 2, the specific steps of the identity authentication application stage are: User U1 first applies for identity authentication to device D1 through the blockchain network. The request is recognized and processed by the smart contract of identity authentication and reputation value on the blockchain network. If successful, the access rights will be written into the blockchain ledger, and the result of successful authentication will be returned to user U1 at the same time. If the smart contract fails to authenticate the user, the authentication of the user's identity will be rejected, and the authentication failure result will be returned to user U1.

4. According to claim 1, a method for IoT access control based on attributes and reputation using smart contracts is characterized in that: In step 3, the specific steps of the access application stage are: User U1 sends an access control request to device D1 through the blockchain network; after receiving the request, the blockchain network will first use the identity authentication query smart contract to first determine the authentication result. If the access behavior is normal, the result C will be returned; if it is abnormal, the result S1 will be returned; the blockchain will then use the reputation value query smart contract to first determine the reputation value status result. If the reputation value is normal, the result C will be returned; if it is abnormal, the result S2 will be returned; the blockchain will then use the results α1 and β2 to grant the user the corresponding access rights A, and write them into the blockchain network at the same time.

5. According to claim 1, a method for IoT access control based on attributes and reputation using smart contracts is characterized in that: In step 4, the specific steps of the reputation value update stage are: The IoT device gateway writes the user's access record into the blockchain network and updates the user's reputation value based on the access record. The user obtains the updated reputation value and writes it into the blockchain. During the access application process, the user's reputation value Rep i will be updated synchronously based on the authentication result. Rep0 is the initial reputation value, so the reputation value update formula is S1: The user's access behavior is judged as illegal access behavior; S2: The user's access behavior is judged as unauthorized access behavior; C: The user's access behavior is judged to be normal access behavior.

Images