| With the rapid development of Internet of Things technology,various devices are connected to the network to realize interaction and data exchange,collecting data to provide services.This process is accompanied by the collection and transmission of massive private data.Once the data is leaked,it will infringe on the rights and interests of users and pose a threat to the security of the system.Therefore,measures must be taken to ensure the security of the Io T system.By using an access control mechanism in the Io T system to define and restrict data access rights,the security of Io T data can be effectively protected.Considering that the Io T system has the characteristics of large number of equipment,strong dynamics and limited resources,directly applying the mainstream centralized data access control scheme to the Io T system may cause problems such as single point of failure,insufficient flexibility and data leakage.This paper conducts a series of researches on Io T access control,and the main contributions are as follows:(1)To deal with the problems of mainstream centralized access control schemes in the Io T environment,this paper proposes an intra-domain access control scheme based on blockchain and IBE(Identity-Based Encryption)algorithm.Through the application of blockchain technology,providing a distributed access control scheme that cannot be tampered with.The IBE algorithm is used to encrypt data,and combined with the access control contract to realize authorization by distributing private keys,it provides a lightweight and fine-grained data access control scheme for the Io T system to ensure the security and credibility of the data authorization and sharing process.The security analysis of our access control scheme proves that the scheme can resist active attacks,passive attacks,and physical attacks.Through experiments and performance analysis,showing that the scheme has good usability.(2)To meet the increasing needs of cross domain interaction between different Io T systems and realize the safe sharing of data between different domains,it is necessary to make corresponding adjustments and improvements based on the existing access control scheme.This paper proposes a cross-domain access control scheme based on blockchain and Trust Net.By applying Trust Net,providing a trust list for cross-domain access control decisions.Ensuring the openness,transparency,security,and trustworthiness of the access control process through the use of cross-domain access control contracts.The performance of the Trust Net-based system is evaluated through simulation experiments,which proves the effectiveness of the proposed cross-domain access control scheme.(3)To use and share Io T system data managed by different blockchains more efficiently and solve the security and reliability issues of cross-chain data exchange,this paper proposes a cross-chain access control scheme based on blockchain and group signature.Based on the notary consortium chain and group signature algorithm,it provides a safe and feasible solution for data sharing and value exchange between differeent Io T systems managed by different chains.Through security analysis,it is shown that the scheme can ensure the anonymity and privacy protection of decision-making nodes.By weakening the centralized characteristics of the traditional notary mechanism,effectively resisting centralized attacks against a single trusted node.The performance of the scheme is evaluated through simulation experiments,and it is proved that the scheme can provide an access control scheme that can ensure cross-chain security without introducing too much delay,and has good usability. |