پدافند الکترونیکی و سایبری

پدافند الکترونیکی و سایبری

یک طرح کنترل دسترسی قابل‌جستجو در اینترنت اشیا مبتنی بر زنجیره قالب دوگانه

نوع مقاله : مقاله پژوهشی

نویسندگان
1 کارشناسی ارشد، دانشگاه شاهد، تهران، ایران
2 دانشیار ، دانشگاه شاهد، تهران، ایران
3 کارشناسی ارشد ، دانشگاه شاهد، تهران، ایران
چکیده
کنترل دسترسی به‌عنوان یکی از عناصر کلیدی در حفظ امنیت و حریم خصوصی دستگاه‌های اینترنت اشیا شناخته می‌شود. با اعمال کنترل مناسب، امکان استفاده صحیح و ایمن از منابع سیستم فراهم می‌گردد. محیط اینترنت اشیا دارای سه ویژگی اساسی سبک‌وزنی، توزیع‌شدگی و پویایی است. نخست آن‌که دستگاه‌های اینترنت اشیا به‌دلیل محدودیت منابع محاسباتی و ذخیره‌سازی، عمدتاً تنها قادر به انجام عملیات محلی نظیر ذخیره‌سازی محدود داده‌ها هستند و بنابراین پیاده‌سازی مکانیزم‌های کنترل دسترسی در آن‌ها با بار محاسباتی مضاعف همراه خواهد بود. دوم آن‌که، استقرار این دستگاه‌ها به‌صورت توزیع‌شده است. روش‌های سنتی کنترل دسترسی مبتنی بر نهاد مرکزی مورد اعتماد طراحی شده‌اند که تمام اطلاعات مرتبط را ذخیره کرده و بر اساس آن تصمیم‌گیری می‌کنند؛ امری که منجر به بروز مشکلاتی از قبیل تأخیر در پردازش، عدم هم‌زمانی و ایجاد نقطه شکست می‌گردد. ازاین‌رو، استفاده از راهکارهای توزیع‌شده برای کنترل دسترسی ضروری به نظر می‌رسد. در این پژوهش، طرحی برای کنترل دسترسی پویا معرفی شده است. در این طرح، بهینه‌سازی‌هایی با هدف کاهش هزینه‌، ساده‌سازی محاسبات پیچیده رمزنگاری و رمزگشایی، اجرای به‌موقع فرایند ابطال، افزایش دقت در کنترل دسترسی، تفویض صحیح دسترسی بین دامنه‌های مختلف، حفظ محرمانگی و حریم خصوصی کاربران انجام گرفته است. بهبود عملکرد سیستم از طریق استفاده از انباشتگر پویا میسر شده است که باعث کاهش دورهای ارتباطی و افزایش سرعت در دسترسی به اطلاعات مربوط به احراز اصالت شده است. همچنین، به‌صورت هم‌زمان از دو زنجیره قالب بهره گرفته شده که به‌طور مجزا احراز اصالت و بررسی یکپارچگی را انجام می‌دهند. مزایای حاصل از این طرح شامل افزایش سرعت در دسترسی به اطلاعات، پشتیبانی از جستجوی مبتنی بر کلمه کلیدی، کنترل دسترسی پویا، ابطال به‌موقع موجودیت‌های مخرب، حفظ حریم خصوصی در سطح بالا، کاهش بار محاسباتی و کاهش تعداد دورهای ارتباطی می‌باشد. تنها ایراد قابل‌ذکر، افزایش جزئی در هزینه‌ها است که در مقایسه با مزایای امنیتی به‌دست‌آمده، قابل اغماض تلقی می‌گردد.
کلیدواژه‌ها
موضوعات

عنوان مقاله English

A Searchable access control Scheme in the Internet of Things based on Dual-blockchain

نویسندگان English

Zahra Mohammadhosseini Taheri 1
Majid Bayat 2
Peyman veysi 1
Fatemeh MotieShirazi 3
1 Master's Degree, Shahed University, Tehran, Iran
2 Associate Professor, Shahed University, Tehran, Iran
3 Master's Degree, Shahed University, Tehran, Iran
چکیده English

Access control is recognized as one of the key elements in maintaining security and privacy within Internet of Things devices. By enforcing proper control mechanisms, the correct and secure use of system resources can be ensured. The IoT environment is characterized by three essential features: lightweight design, distribution, and dynamism. First, IoT devices, due to their limited computational and storage resources, are typically capable of performing only local operations such as minimal data storage. Therefore, implementing access control mechanisms on these devices imposes additional computational overhead. Second, the deployment of IoT devices is inherently distributed. Traditional access control methods are designed around a centralized trusted authority that stores all related information and makes access decisions based on it—an approach that can lead to issues such as processing delays, lack of synchronization, and the creation of single points of failure. Consequently, distributed access control solutions are required. In this study, a dynamic access control scheme is proposed. The design introduces optimizations aimed at reducing costs, simplifying complex cryptographic operations, ensuring timely revocation, enhancing access accuracy, enabling proper delegation of access across multiple domains, and preserving user confidentiality and privacy. System performance is improved through the use of a dynamic accumulator, which reduces communication rounds and accelerates access to authentication information. Additionally, two separate blockchain structures are employed concurrently—one dedicated to authentication and the other to integrity verification. The advantages of the proposed scheme include faster access to information, support for keyword-based search, dynamic access control, timely revocation of malicious entities, strong privacy preservation, reduced computational overhead, and fewer communication rounds. The only notable drawback is a slight increase in cost, which is negligible compared to the significant security benefits achieved.

کلیدواژه‌ها English

Internet of Things
Dual-Blockchain
Access Control
Searchable
Smart contract

Smiley face

 

1.           Xiaohan Hao, Wei Ren, Yangyang Fei, Tianqing Zhu, Kim-Kwang Raymond Choo,” A Blockchain-Based Cross-Domain and Autonomous Access Control Scheme for Internet of Things,” IEEE TRANSACTIONS ON SERVICES COMPUTING, VOL. 16, NO. 2, MARCH/APRIL2023,https://doi.org/10.1109/TSC.2022.3179727
2.           Suhair Alshehri, Omaimah Bamasaq, Daniyal Alghazzawi, Arwa Jamjoom,” Dynamic Secure Access Control and Data Sharing Through Trusted Delegation and Revocation in a Blockchain-Enabled Cloud-IoT Environment,” IEEE INTERNET OF THINGS JOURNAL, VOL. 10, NO. 5, 1 MARCH2023,https://doi.org/10.1109/JIOT.2022.3217087
3.           Hancheng Gao, Haiping Huang, Lingyan Xue, Fu Xiao, Qi Li,” Blockchain-Enabled Fine-Grained Searchable Encryption With Cloud–Edge Computing for Electronic Health Records Sharing,” IEEE INTERNET OF THINGS JOURNAL, VOL. 10, NO. 20, 15 OCTOBER 2023,https://doi.org/ 10.1109/JIOT.2023.3279893
4.           Suhui Liu, Liquan Chen, Liqun Chen, Jianchang Lai,” Integrated and Accountable Data Sharing for Smart Grids With Fog and Dual-Blockchain Assistance,” IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, https://doi.org/ 10.1109/TII.2023.3328831
5.           J. Wang, X. Lin, Y. Wu, and J. Wu, “Blockchain-Enabled Lightweight Fine-  Grained Searchable Knowledge Sharing for Intelligent IoT,” IEEE Internet of Things Journal, vol.10,no.24,pp.2156621579,Dec.2023,https://doi.org/10.1109/JIOT.2023.3306606.
6.           J. Cui, N. Liu, Q. Zhang, D. He, C. Gu, and H. Zhong, “Efficient and Anonymous Cross-Domain Authentication for IIoT Based on Blockchain,” IEEE Transactions on Network ScienceandEngineering,vol.10,no.2,pp.899–910,Mar.2023,https://doi.org/10.1109/TNSE.2022.3224453
7.           J. Yu, S. Liu, M. Xu, H. Guo, F. Zhong, and W. Cheng, “An Efficient Revocable    and Searchable MA-ABE Scheme With Blockchain Assistance for C-IoT,” IEEE    Internet of Things Journal, vol. 10, no. 3, pp. 2754–2766, Feb.2023,https://doi.org/      10.1109/JIOT.2022.3213829.
8.           S. Wang, J. Ye, and Y. Zhang, “A keyword searchable attribute-based encryption scheme with attribute update for cloud storage,” PloS one, vol. 13, no. 5, 2018, Art. no. e0197318. https://doi.org/ 10.1371/journal.pone.0197318
9.           Jegadeesan Subramani, Azees Maria,” Blockchain-Based Physically Secure and Privacy-Aware Anonymous Authentication Scheme for Fog-Based VANETs,” Digital ObjectIdentifier,https://doi.org/10.1109/ACCESS.2022.3230448.
10.        Somchart Fugkeaw, Leon Wirz, Lyhour Hak,” Secure and Lightweight Blockchain-Enabled Access Control for Fog-Assisted IoT Cloud Based Electronic Medical Records Sharing,”DigitalObjectIdentifier,https://doi.org/10.1109/ACCESS.2023.3288332
11.        Arezou Zamanyzadeh Abyaneh, Nizar Zorba, Bechir Hamdaoui,” Empowering Next-Generation IoT WLANs Through Blockchain and 802.11ax Technologies,” IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS, VOL. 24, NO. 7, JULY 2023,https://doi.org/ 10.1109/TITS.2022.3153484
12.        Aditya Pathak, Irfan Al-Anbagi, Howard J. Hamilton,” TABI: Trust-Based ABAC Mechanism for Edge-IoT Using Blockchain Technology,” Digital Object Identifier https://doi.org/10.1109/ACCESS.2023.3265349
13.        Sivaselvan N, Vivekananda Bhat K, Muttukrishnan Rajarajan, Ashok Kumar Das,” A New Scalable and Secure Access Control Scheme using Blockchain Technology for IoT,” publication in IEEE Transactions on Network and Service Management. This is the author's version which has not been fully edited and content may change prior to final publication. Citation information: https://doi.org/ 10.1109/ TNSM. 2023.3246120.
14.        Hongzhi Li, Dezhi Han, Chin-Chen Chang,” DAC4SH: A Novel Data Access Control Scheme for Smart Home Using Smart Contracts,” IEEE SENSORS JOURNAL, VOL. 23, NO.6,15MARCH2023,https://doi.org/10.1109/JSEN.2023.3241093
15.        Dezhi Han, Yujie Zhu, Dun Li, Wei Liang, Alireza Souri, Kuan-Ching Li,” A Blockchain-Based Auditable Access Control System for Private Data in Service-Centric IoT Environments,” IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, VOL. 18, NO. 5, MAY 2022,https://doi.org/ 10.1109/TII.2021.3114621
16.        Shuang Sun , Rong Du, Shudong Chen,  Weiwei Li,” Blockchain-Based IoT Access Control System: Towards Security, Lightweight, and Cross-Domain,” Digital Object Identifier https://doi.org/10.1109/ACCESS.2021.3059863
17.        Fathe Jeribi, Rashid Amin, Mohammed Alhameed, D Ali Tahir,” An Efficient Trust Management Technique Using ID3 Algorithm With Blockchain in Smart Buildings IoT,” DigitalObjectIdentifier,https://doi.org/10.1109/ACCESS.2022.3230944
18.        Peng Wang, Ning Xu, Haibin Zhang, Wen Sun, Abderrahim Benslimane,” Dynamic Access Control and Trust Management for Blockchain empowered IoT,” : https://doi.org/ 10.1109/JIoT.2021.3125091,IEEE Internet of Things Journal
19.        Xin Wei, Yong Yan, Shaoyong Guo, Xuesong Qiu, and Feng Qi,” Secure Data Sharing: Blockchain enabled Data Access Control Framework for IoT,” JOURNAL OF LATEX CLASS FILES, VOL. 14, NO. 8, AUGUST 2015,https://doi.org/ 10.1109/JIOT.2021.3111012
20.        Kwame Opuni-Boachie Obour Agyekum, Qi Xia, Emmanuel Boateng Sifah, Christian Nii Aflah Cobblah, Hu Xia, Jianbin Gao,” A Proxy Re-Encryption Approach to Secure Data Sharing in the Internet of Things Based on Blockchain,” IEEE SYSTEMS JOURNAL, VOL. 16, NO. 1,MARCH2022,https://doi.org/10.1109/JSYST.2021.3076759
21.        Saiyu Qi, Xu Yang, Jiahe Yu, and Yong Qi,” Blockchain-Aware Rollbackable Data Access Control for IoT-Enabled Digital Twin,” IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, VOL. 41, NO. 11, NOVEMBER2023,https://doi.org/10.1109/JSAC.2023.3310061
22.        Zia Ullah, Basit Raza, Habib Shah, Shahzad Khan, D Abdul Waheed,” Towards Blockchain-Based Secure Storage and Trusted Data Sharing Scheme for IoT Environment,” Digital Object Identifier ,https://doi.org/10.1109/ ACCESS. 2022.3164081
23.        Zeeshan Zulkifl, Fawad Khan, Shahzaib Tahir,…,” FBASHI: Fuzzy and Blockchain-Based Adaptive Security for Healthcare IoTs,” Digital Object Identifier ,https://doi.org/10.1109/ACCESS.2022.3149046
24.        Omaji Samuel, Akogwu Blessing Omojo, Syed Muhammad Mohsin, Prayag Tiwari, Deepak Gupta, Shahab S. Band,” An Anonymous IoT-Based E-Health Monitoring System Using Blockchain Technology,” IEEE SYSTEMS JOURNAL, VOL. 17, NO. 2, JUNE 2023, https://doi.org/ 10.1109/JSYST.2022.3170406
25.        Lihua Zhang, Boping Li ,” An Internet of Things Access Control Scheme Based on Permissioned Blockchain and Edge Computing,” 2023 by the authors. Licensee MDPI,Basel,Switzerland.Appl.Sci.2023,13,4167,https://doi.org/10.3390/app13074167
26.        Oscar Novo,” Blockchain Meets IoT: an Architecture for Scalable Access Management in IoT,” JOURNAL OF INTERNET OF THINGS CLASS FILES, VOL. 14, NO. 8, MARCH2018,https://doi.org/10.1109/JIOT.2018.2812239
27.        J. Lu, W. Li, J. Sun, R. Xiao, and B. Liao, “Secure and Real-Time Traceable  Data Sharing in Cloud-Assisted IoT,” IEEE Internet of Things Journal, vol. 11, no. 4, pp. 65216536,Feb.2024,https://doi.org/10.1109/JIOT.2023.3314764.
28.        J. Liu, Y. Fan, R. Sun, L. Liu, C. Wu, and S. Mumtaz, “Blockchain-Aided     Privacy-Preserving Medical Data Sharing Scheme for E-Healthcare System,” IEEE Internet of Things Journal, vol. 10, no. 24, pp. 21377–21388, Dec. 2023, https://doi.org/ 10.1109/JIOT.2023.3287636.
29.        K. Zhang, Y. Zhang, Y. Li, X. Liu, and L. Lu, “A Blockchain-Based Anonymous     Attribute-Based Searchable Encryption Scheme for Data Sharing,” IEEE Internet of Things Journal, vol. 11, no. 1, pp. 1685–1697, Jan. 2024, https://doi.org/    10.1109/JIOT.2023.3290975.
30.        Y. Liu et al., “A Blockchain-Based Cross-Domain Authentication Management System for IoT Devices,” IEEE Transactions on Network Science and   Engineering, vol.11,no.1,pp.115127,Jan.2024,https://doi.org/10.1109/TNSE.2023.3292624.  
31.        J. Y. Lee, J. Oh, D. K. Kwon, M. Kim, K. Kim, and Y. Park, “Blockchain-Enabled Key Aggregate Searchable Encryption Scheme for Personal Health Record Sharing With Multi-Delegation,” IEEE Internet of Things Journal, 2024, https://doi.org/ 10.1109/JIOT.2024.3357802.
32.        K. Zhang, M. Deng, B. Gong, Y. Miao, and J. Ning, “Privacy-Preserving Traceable Encrypted Traffic Inspection in Blockchain-Based Industrial IoT,”  IEEE Internet of Things Journal, vol. 11, no. 2, pp. 3484–3496, Jan. 2024, https://doi.org/10.1109/JIOT.2023.3297601.  
33.        G.Chengetal.,“A Lightweight Authentication-Driven Trusted Management  Framework for IoT Collaboration,” IEEE Transactions on Services Computing, 2024, https://doi.org/ 10.1109/TSC.2023.3349305.
34.        K. Fan et al., “SC-Chain: An Efficient Blockchain Framework for Smart City,”   IEEE Internet ofThingsJournal,vol.11,no.5,pp.7863–7877,Mar.2024, https://doi.org/10.1109/JIOT.2023.3317451.
35.        J. Yu, B. Yan, H. Qi, S. Wang, and W. Cheng, “An Efficient and Secure Data  Sharing Scheme for Edge-Enabled IoT,” IEEE Transactions on Computers, vol.73, no. 1, pp. 178–191, Jan. 2024, https://doi.org/ 10.1109/TC.2023.3325668.
36.        R. Guo, G. Yang, H. Shi, Y. Zhang, and D. Zheng, “O3-R-CP-ABE: An Efficient and     Revocable Attribute-Based Encryption Scheme in the Cloud-Assisted IoMT     System,” IEEE Internet of Things Journal, vol. 8, no. 11, pp.89498963,Jun.2021,https://doi.org/10.1109/JIOT.2021.3055541.
37.        Y. Zhang, X. Wang, X. He, N. Zhang, Z. Zheng, and K. Xu, “Galaxy: A Scalable BFT and Privacy-Preserving Pub/Sub IoT Data Sharing Framework Based on Blockchain,”IEEEInternetofThingsJournal,vol.11,no.3,pp.52225236,Feb.2024,https://doi.org/10.1109/JIOT.2023.3307073.
38.        D. Wang, B. Li, B. Song, Y. Liu, K. Muhammad, and X. Zhou, “Dual-Driven Resource Management for Sustainable Computing in the Blockchain-Supported Digital Twin IoT,” IEEE Internet of Things Journal, vol. 10, no. 8, pp. 65496560,Apr.2023,https://doi.org/10.1109/JIOT.2022.3162714.
39.        K. Zhang, M. Deng, B. Gong, Y. Miao, and J. Ning, “Privacy-Preserving Traceable Encrypted Traffic Inspection in Blockchain-Based Industrial IoT,”  IEEE Internet of Things Journal, vol. 11, no. 2, pp. 3484–3496, Jan. 2024, https://doi.org/10.1109/JIOT.2023.3297601.
40.        J. Wang, X. Lin, Y. Wu, and J. Wu, “Blockchain-Enabled Lightweight Fine- Grained Searchable Knowledge Sharing for Intelligent IoT,” IEEE Internet of Things Journal, vol. 10, no. 24, pp. 21566–21579, Dec. 2023, https://doi.org/10.1109/JIOT.2023.3306606.
41.        L. Zhang, X. Li, Q. Wu, and F. Rezaeibagha, “Blockchain-Aided AnonymousTraceable and Revocable Access Control Scheme With Dynamic Policy Updating for the Cloud IoT,” IEEE Internet of Things Journal, vol. 11, no. 1, pp. 526–542, Jan. 2024, https://doi.org/ 10.1109/JIOT.2023.3287190.
42.        Feiffi Guo, Guohua Shen ,” DABAC: Smart Contract-Based Spatio-Temporal Domain Access Control for the Internet of Things,” Digital Object Identifier,https://doi.org/10.1109/ACCESS.2023.3257027.
43.        Zhuo Ma,  Jiawei Zhang,” Efficient, Traceable and Privacy-Aware Data Access Control in Distributed Cloud-Based IoD Systems,” Digital Object Identifier https://doi.org/10.1109/ACCESS.2023.3272484
44.        Kebira Azbeg, Ouail Ouchetto, Said Jai Andaloussi,” Access Control and Privacy-Preserving Blockchain-Based System for Diseases Management,” IEEE TRANSACTIONS ON COMPUTATIONAL SOCIAL SYSTEMS,VOL.10,NO. 4, AUGUST 2023,https://doi.org/ 10.1109/TCSS.2022.3186945
45.        Carles Anglés-Tafalla, Alexandre Viejo, Jordi Castellà-Roca, Macià Mut-Puigserver, M. Magdalena Payeras-Capellà,” Security and Privacy in a Blockchain-Powered Access Control System for Low Emission Zones,” IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS, VOL. 24, NO. 1, JANUARY2023,https://doi.org/10.1109/TITS.2022.3211659.
46.        Yuming Feng, Weizhe Zhang, Senior Member, IEEE, Xiapu Luo, Bin Zhang,” A Consortium Blockchain-based Access Control Framework with Dynamic Orderer Node Selection for 5G-enabled Industrial IoT,” EEE TRANSACTIONS ON INDUSTRIAL INFORMATICS,https://doi.org/10.1109/TII.2021.3078183
47.        Tanzeel Zaidi, Muhammad Usman, Muhammad Umar Aftab,” Fabrication of Flexible Role-Based Access Control Based on Blockchain for Internet of Things Use Cases,” Digital Object Identifier https://doi.org/10.1109/ACCESS.2023.3318487
48.        Fei Tong, Xing Chen, Cheng Huang, Yujian Zhang, Xuemin Shen,” Blockchain-Assisted Secure Intra/Inter-Domain Authorization and Authentication for Internet of Things,” IEEE INTERNET OF THINGS JOURNAL, VOL. 10, NO. 9, 1 MAY 2023, https://doi.org/ 10.1109/JIOT.2022.3229676
49.        Marah R. Bataineh, Wail Mardini, Yaser M. Khamayseh, D Muneer Masadeh Bani Yassein,” Novel and Secure Blockchain Framework for Health Applications in IoT,” Digital Object Identifier https://doi.org/10.1109/ACCESS.2022.3147795
50.        Zijian Bao, Debiao He, Huaqun Wang, Min Luo, Cong Peng,” A Group Signature Scheme with Selective Linkability and Traceability for Blockchain-Based Data Sharing Systems in E-health Services,” publication in IEEE Internet of Things Journal. This is the author's version which has not been fully edited and content may change prior to final publication. Citation information: https://doi.org/10.1109/JIOT.2023.3284968.
51.        Jiawei Zhang , Yanbo Yang , Ximeng Liu, Jianfeng Ma,” An Efficient Blockchain-Based Hierarchical Data Sharing for Healthcare Internet of Things,” IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, VOL. 18, NO. 10, OCTOBER 2022, https://doi.org/ 10.1109/TII.2022.3145851
 

  • تاریخ دریافت 16 بهمن 1404
  • تاریخ بازنگری 11 فروردین 1405
  • تاریخ پذیرش 20 فروردین 1405
  • تاریخ انتشار 01 اردیبهشت 1405