| In today’s society,hundreds of millions of devices are linked to the Internet of Things.How to guarantee the safety of equipments and people’s privacy information in the Internet of Things is of primary importance in the security syudies of the Internet of Things.Access control and identity authentication have become the two cornerstone technologies to protect the Internet of Things.In the multi-trust domain of the Internet of Things,with the continuous improvement of information service efficiency requirements,the traditional cross-domain authentication system with high cost and low efficiency can not meet the demand,and the centralized access control method generally relying on trusted third parties can not provide the essential security blanket.To cure the above questions,reduce the cost and simplify the process of information flow,a cross-domain access control scheme combining blockchain technology in the Internet of Things is proposed in this thesis.The dissertation contents include designing the following:(1)Realize cross trust domain identity authentication on the basis of blockchain technology.In the way of private blockchain to construct consortium blockchain,realize the management of users and equipment in the domain and the authentication process with the domain.Each node in the domain participates in the construction of consortium blockchain to realize cross-domain identity authentication in the consortium blockchain,A more perfect blockchain certificate and its issuance,authentication,revocation and update rules are redesigned to provide a more flexible and efficient cross-domain identity authentication scheme for the Internet of Things.(2)Among many Internet of Things access control models,the capability-based access control framework is deployed and optimized,and combined with the blockchain to design more secure power tokens and related smart contracts,including dynamic access authority verification based on smart contracts.Compared with the traditional authorization tree,the authorization graph scheme is selected to improve the authorization mechanism,A more rigorous capability revocation mechanism is proposed,which has solved the problems of low security and insufficient fine granularity in traditional solutions.In comparison with the previous cross-domain authentication and access control scheme,the distinct superiority of the proposed scheme in terms of performance and security can be proved by the theoretical and experimental analyses.It can provide cross-domain authentication and access control services with high scalability,strong security and high efficiency for multi-trust domain scenarios in the Internet of Things. |
