With the dramatic increase in the number of smart devices,Io T has gained more and more attention in recent years,however,the dynamic and large-scale network structure characteristics also bring security risks and challenges to Io T systems.Access control system is a reliable means to protect the data privacy and security of Io T devices,but the current centralized server-based access control framework still has the risk of single-point barrier and is difficult to be applied to lightweight Io T devices,the emergence of blockchain technology the above problem provides a feasible solution.In this paper,the blockchain-based distributed access control mechanism for Io T is studied,and the main work and innovations include the following aspects.(1)To address the problems of unclear permission allocation of blockchain-based access control model in the existing research,which leads to the easy existence of overstepping access when requesters use device permissions,and the access control model cannot be applied to lightweight Io T devices,etc.,a new access control policy model is proposed by combining blockchain technology and attribute-based access control model,which improves access control through the mutual cooperation between multiple contracts The fine-grained granularity of permission assignment is improved through the cooperation between multiple contracts.(2)For the data in the blockchain network is open and transparent to all participating nodes,which leads to the possibility of malicious users illegally accessing the access control attribute information in the blockchain network through the node identity.A blockchain-based access control information protection model is proposed based on the Hyperledger Fabric blockchain platform.The model isolates the subject and object sensitive information by combining the main chain and side chain to protect the privacy and data reliability of users.(3)Based on the above research results this paper chooses Hyperledger Fabric as the blockchain architecture to design a blockchain-based Io T access control system,and implements the system in three aspects: sensing layer,network layer,and application layer.In the performance comparison test with the same type of research,this system has better performance in terms of throughput and average latency during large-scale access requests,and can reach consensus more quickly and efficiently in the distributed system to ensure data consistency,which verifies the effectiveness of both models and systems. |