Hierarchical Blockchain-Based Multi-Chaincode Access Control for Securing IoT Systems

Electronics

卷:11

Khalid Almarhabi¹  Adam Ibrahim Abdi²  Abdullah Basuhail²  Maher Khemakhem²  Kamal Jambi²  Fathy Elbouraey Eassa²  Mohammad Yamin³ 

[1] Department of Computer Science, College of Computing at Alqunfudah, Umm Al-Qura University, Makkah 21514, Saudi Arabia;

[2] Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University (KAU), Jeddah 21589, Saudi Arabia;

[3] Faculty of Economics and Administration, King Abdulaziz University (KAU), Jeddah 21589, Saudi Arabia;

关键词: access control;    IoT;    security;    privacy;    blockchain;    hyperledger fabric;   

DOI  :  10.3390/electronics11050711

来源: DOAJ

【 摘 要 】

The rapid growth of the Internet of Things (IoT) and its attributes of constrained devices and a distributed environment make it difficult to manage such a huge and growing network of devices on a global scale. Existing traditional access-control systems provide security and management to the IoT system. However, these mechanisms are based on central authority management, which introduces issues such as a single point of failure, low scalability, and a lack of privacy. In order to address these problems, many researchers have proposed using blockchain technology to achieve decentralized access control. However, such models are still faced with problems such as a lack of scalability and high computational complexity. In this paper, we propose a light-weight hierarchical blockchain-based multi-chaincode access control to protect the security and privacy of IoT systems. A clustering concept with BC managers enables the extended scalability of the proposed system. The architecture of the proposed solution contains three main components: an Edge Blockchain Manager (EBCM), which is responsible for authenticating and authorizing constrained devices locally; an Aggregated Edge Blockchain Manager (AEBCM), which contains various EBCMs to control different clusters and manage ABAC policies, and a Cloud Consortium Blockchain Manager (CCBCM), which ensures that only authorized users access the resources. In our solution, smart contracts are used to self-enforce decentralized AC policies. We implement a proof of concept for our proposed system using the permissioned Hyperledger Fabric. The simulation results and the security analysis show the efficiency and effectiveness of the proposed solution.

【 授权许可】

Unknown