FairAccess: a new Blockchain-based access control framework for the Internet of Things
FairAccess: a new Blockchain-based access control framework for the Internet of Things
复制标题
DOI：
10.1002/sec.1748
复制
发表时间：
2016-12-01
影响因子：
--
通讯作者：
Ouahman, Abdellah Ait
中科院分区：
文献类型：
--
作者：
Ouaddah, Aafaf;Abou Elkalam, Anas;Ouahman, Abdellah Ait
安全和隐私是物联网（IoT）环境中的巨大挑战，但不幸的是，物联网相关标准和协议的协调几乎没有并且缓慢地普及。在本文中，我们提出了一个新的框架，在物联网访问控制的基础上区块链技术。我们的第一个贡献是在物联网的目标，模型，架构和机制规范中为我们提出的框架提供参考模型。此外，我们引入了FairAccess作为一个完全分散的匿名和隐私保护的授权管理框架，使用户能够拥有和控制他们的数据。为了实现我们的模型，我们使用区块链并将其调整为分散的访问控制管理器。与金融比特币交易不同，FairAccess引入了用于授予、获取、委托和撤销访问权限的新型交易。作为概念验证，我们使用Raspberry PI设备和本地区块链建立了初始实现。最后，我们讨论了一些局限性，并提出了进一步的机会。(C)2017约翰威利父子有限公司
Security and privacy are huge challenges in Internet of Things (IoT) environments, but unfortunately, the harmonization of the IoT-related standards and protocols is hardly and slowly widespread. In this paper, we propose a new framework for access control in IoT based on the blockchain technology. Our first contribution consists in providing a reference model for our proposed framework within the Objectives, Models, Architecture and Mechanism specification in IoT. In addition, we introduce FairAccess as a fully decentralized pseudonymous and privacy preserving authorization management framework that enables users to own and control their data. To implement our model, we use and adapt the blockchain into a decentralized access control manager. Unlike financial bitcoin transactions, FairAccess introduces new types of transactions that are used to grant, get, delegate, and revoke access. As a proof of concept, we establish an initial implementation with a Raspberry PI device and local blockchain. Finally, we discuss some limitations and propose further opportunities. (C) 2017 John Wiley & Sons, Ltd.