| With the advent of the Industrial Internet of Things(IIoT),physical entities can obtain real-time data from the network and share key information.In practical applications,the interaction between IIoT entities relies heavily on standard communication protocols.The concentration of IoT devices and the structure of heterogeneous networks make communication security between entities particularly important.Current research usually uses key agreement protocols to ensure secure communication between entities,but traditional key agreement protocols cannot prevent unauthorized users from accessing,and cannot hierarchically protect sensitive data and key resources in IIoT.Therefore,it is necessary to design a secure key agreement protocol that can achieve fine-grained access control.At the same time,open IIoT may be attacked by adversaries,resulting in data being destroyed or tampered with during transmission.Using blockchain technology with non-repudiation and tamper-proof functions can effectively solve this problem.Therefore,this paper proposes a key agreement protocol based on blockchain and attribute for IIoT,which deploys attribute-based access control to smart contracts,so as to achieve fine-grained access control and reduce human intervention.The cloud server stores key fragments,which solves the problem that it is difficult to update attributes in the blockchain and realizes the function of dynamic agreement.Through the traceability and tamper-proof characteristics of the blockchain,transaction information can be recorded on the chain,preventing unauthorized modification of data,and ensuring that all processes are traceable.Through online storage and offline computing,asynchronous communication between entities is realized and communication efficiency is improved.Through the chameleon hash signature,the tracking of traitors who illegally leaked key information during the agreement process was realized.Through the cascade chain,the rebels are quickly identified and held accountable.Finally,the formal security analysis,theoretical performance evaluation and experimental results show that the proposed scheme is effective.The specific main tasks are as follows:(1)In response to the network environment requirements of IIoT,in order to meet secure and reliable communication,this paper designs an attribute based asymmetric group key agreement protocol.The protocol adopts an attribute based multiple signature scheme,effectively protecting the privacy of each participant in the network environment.In addition,this article conducted security and efficiency analysis on the proposed protocol,and the results showed that the protocol can meet the requirements of high security and efficiency.Therefore,the protocol proposed in this article is a reliable network communication method that can meet the security requirements of the IIoT network environment.(2)To meet the need for secure and efficient communication between entities in the Internet of Things,we propose a secure,efficient and traceable key agreement scheme combining blockchain and cloud storage technologies.This scheme achieves non interactive key negotiation between users and ensures the integrity,traceability,and non repudiation of the negotiation process through blockchain technology.Finally,a security analysis was conducted on this scheme and its performance was compared with other schemes.The results showed that our proposed scheme had good performance in both security and performance.(3)In response to the issue of key information required for synthesizing session keys during the negotiation process being easily leaked by traitors to others,a property based chameleon signature with traitor tracking function is designed by combining attribute based signature scheme and chameleon hash.How to apply it to the negotiation process of the protocol is described to improve the security and reliability of the protocol.Finally,security analysis is conducted on attribute based chameleon signatures,and compared with other chameleon signature schemes,it is proven that our scheme is more suitable for the protocol proposed in this paper. |
