| 摘要: |
| 针对物联网场景下跨信任域的信息交换需求，结合区块链与边缘计算思想，构建了一种适应于物联网认证的架构.首先，基于联盟链技术设计了适应于物联网跨域认证的架构及流程，构建了安全的跨域信息交互环境；随后引入边缘网关，以屏蔽物联网的底层异构性，并设计了基于网关的跨域认证流程，增强了物联网认证中的隐私保护；最后，针对设计协议的安全性进行了分析，证明其可抵抗物联网场景下的常见攻击.实验结果表明，该设计方案在计算和通信开销上优于传统方案，可用于物联网. |
| 关键词: 区块链 物联网 联盟链 多信任域 认证 |
| DOI：10.13328/j.cnki.jos.006033 |
| 分类号:TP393 |
| 基金项目:国家重点研发计划（2019YFB2102302）；国家自然科学基金（61702048） |
|
| Cross Domain Authentication for IoT Based on Consortium Blockchain |
|
WEI Xin1, WANG Xin-Yan2, YU Zhuo3, GUO Shao-Yong1, QIU Xue-Song1
|
|
1.State Key Laboratory of Networking and Switching Technology(Beijing University of Posts and Telecommunications), Beijing 100876, China;2.State Grid Henan Electric Power Company, Zhengzhou 450000, China;3.Beijing China-power Information Technology Co. Ltd., Beijing 100192, China
|
| Abstract: |
| Aiming at information exchange requirements of cross-trust domains under IoT scenario, this paper constructs an authentication architecture which suits for IoT with blockchain and edge computing. Firstly, based on consortium chain, the paper designs architecture and process for cross-domain authentication in IoT, creates secure cross-domain information exchange environment for IoT. In addition, edge gateway is introduced to shield heterogeneity and sensitive information of things. Based on edge gateway,authentication protocol for cross-trust domain authentication is designed, which strengthens privacy preserving in IoT. Finally,performance analysis proves that the design could resist common attacks in IoT scenario. Simulation results prove that the design has better performance than traditional way in both computation consumption and communication consumption, can be used for IoT. |
| Key words: blockchain Internet of things consortium blockchain cross-trust domain authentication |
