Research And Implementation Of A Cross-Domain Access Control Mechanism Of Internet Of Things With Blockchain And Capabilities

In the past few years,the Internet of Things(IoT)has been widely used in transportation,medical and health,industrial manufacturing and other industries.With the continuous implement of the application of IoT,frequent attacks against IoT have exposed its problems on security and privacy protection.In addition,in the process of industry development,the differences in application scenarios and requirements have also led to the fragmentation of IoT.These two issues have severely restricted the future development of the Internet of Things.In order to enhance the interoperability between different IoT platforms or application domains,and prevent privacy data leakage due to unauthorized access during device collaboration,this article combines distributed capability-based access control(CapAC)with blockchain technology and proposes a set of access control mechanisms for the multi-domain IoT device collaboration scenario.Based on the blockchain ledger,the structure and storage method of the capability token based on the transaction are designed and implemented.Based on the blockchain ledger,the structure and storage method of the capability token based on the transaction are designed and implemented,while based on the block chain smart contract,the function of capability token management is designed and realized.According to CapACs access decision-making method,a blockchain-based token verification method is designed.The blockchain lightweight node is optimized for the characteristics of IoT.Finally,a blockchain system is built to implement the mechanism proposed in the article.Experimental results show that compared to centralized access control mechanisms,this solution can safely and accurately execute access decisions in large-scale IoT scenarios and has more stable processing performance.Lightweight design can greatly reduce node storage burden.Through the analysis of man-in-the-middle attacks,replay attacks and denial-of-service attacks,it is proved that the access control mechanism can effectively protect the security and privacy in the collaborative process of IoT devices.