摘要
针对汽车产业链资源信息多源异构、跨平台交互建立困难的问题,提出了一种基于区块链的跨域权限委托方法(BCPDM)。该方法首先将区块链技术与基于属性的访问控制(ABAC)模型相结合,并建立权限过滤功能,以避免平台间权限冲突;其次,引入权限收回机制,提高模型授权的灵活性,避免长时间授权可能导致的信息泄露问题,旨在以灵活、动态、高效和可信的方式解决复杂汽车产业链多域环境下的访问授权问题。经安全性分析与实验表明:所提方法在复杂汽车产业链多域环境中能够保证用户的安全访问和各平台之间的数据信息交互,并且计算开销低。该方法能够满足汽车产业链协同交互的实时要求,为解决复杂汽车产业链中的访问控制问题提供了一种可行的解决方案。
Aiming at the problems of multi-source heterogeneity of automotive industry chain resource information and the difficulty of establishing cross-platform interaction,this paper proposed a blockchain-based cross-domain permission delegation mode(BCPDM).Firstly,it combined blockchain technology with attribute-based access control(ABAC)model,and established a permission filtering function to avoid inter-platform permission conflicts.Secondly,it introduced a permission retraction mechanism to improve the flexibility of the model authorization and avoid the problem of information leakage that might be caused by prolonged authorization,aiming to solve the access authorization problem under the multidomain environment of complex automotive industry chain in a flexible,dynamic,efficient and trustworthy way.The security analysis and experimental results show that the proposed method can ensure the safe access of users and data and information interaction between platforms in the multi-domain environment of complex automotive industry chain,and the computational overhead is low.The method can meet the real-time requirements of automobile industry chain cooperative interaction,and provides a feasible solution for solving the access control problem in complex automobile industry chain.
作者
邓良明
李斌勇
邓显辉
Deng Liangming;Li Binyong;Deng Xianhui(School of Cybersecurity(Xin Gu Industrial College),Chengdu University of Information Technology,Chengdu 610225,China;Advanced Cryptography&System Security Key Laboratory of Sichuan Province,Chengdu 610225,China)
出处
《计算机应用研究》
CSCD
北大核心
2024年第8期2284-2291,共8页
Application Research of Computers
基金
国家重点研发计划资助项目(2018YFB1701502)
四川省科技计划资助项目(2024NSFSC0515,MZGC20230013)
成都信息工程大学青年创新(领军)项目(KYQN202212)。
关键词
汽车产业链
跨域访问
区块链
权限委托
automotive industry chain
cross-domain access
blockchain
delegation of authority
作者简介
邓良明(1998-),男,四川成都人,硕士,主要研究方向为访问控制与区块链;通信作者:李斌勇(1982-),男,四川江油人,副教授,硕导,博士,主要研究方向为云服务访问控制(libinyong@163.com);邓显辉(1997-),男,四川自贡人,硕士,主要研究方向为博弈论与访问控制.
