物联网感知层一种基于属性的访问控制机制

doi:10.3969/j.issn.1001-2400.2012.02.012

J4 ›› 2012, Vol. 39 ›› Issue (2): 66-72.doi: 10.3969/j.issn.1001-2400.2012.02.012

物联网感知层一种基于属性的访问控制机制

任方¹;马建峰^1,2;郝选文¹

(1. 西安电子科技大学计算机网络与信息安全教育部重点实验室，陕西西安 710071;
2. 陕西省物联网实验研究中心，陕西西安 710071)

收稿日期:2011-05-12 出版日期:2012-04-20 发布日期:2012-05-21
通讯作者: 任方
作者简介:任方(1981-)，男，西安电子科技大学博士研究生，E-mail: renfang_81@163.com．
基金资助:
国家自然科学基金资助项目(60872041, 61072066);中央高校基本科研业务费专项资金资助项目(JY10000903001，JY10000901034)

Attribute-based access control scheme for the perceptive layer of the Internet of Things

REN Fang¹;MA Jianfeng^1,2;HAO Xuanwen¹

(1. Ministry of Education Key Lab. of Computer Network and Information Security, Xidian Univ., Xi'an 710071， China;
2. Shaanxi Experimental Research Center of the Internet of Things, Xi'an 710071， China)

Received:2011-05-12 Online:2012-04-20 Published:2012-05-21
Contact: REN Fang

摘要/Abstract

摘要：

为了实现物联网感知层的细粒度访问控制和用户的匿名数据访问，提出了一种基于用户属性的访问控制机制，并利用双线性映射给出了具体的算法实现．该方案中，用户以其属性证书为依据向传感器节点发起数据访问请求，传感器节点根据门限原则决定是否允许用户访问．该方案可以实现灵活的细粒度访问控制和匿名的数据访问，用户和传感器节点的信息交互次数达到了最少，节点运算量少，只需要进行一次公钥加密．与现有的传感器网络访问控制方案相比，该方案传感器节点开销较小，可扩展性良好，可以适应物联网感知层的访问控制需求．

关键词: 物联网, 传感器网络, 访问控制, 匿名性

Abstract:

In order to achieve the fine-grained access control and the anonymity of the user access to data in the Internet of Things, an attribute-based access control model is proposed and realized by using the bilinear map. In this scheme, users request data access to the sensor node based on their attributes certificates and the sensor node determines whether to allow access according to the threshold principle. This scheme effectively realizes the flexible fine-graind access control and anonymous access to data. The number of interactions between users and sensor nodes is minimized and the computation of sensor nodes is reduced to one public key encryption. Analysis shows that the scheme has the advantages over the current access control mechanisms of better scalability and lower cost in communication and computation and can adapt to access control requirement of perceptive layer of the Internet of Things.

Key words: the Internet of Things, wireless sensor networks, access control, anonymity

中图分类号:

TP393.01

任方;马建峰;郝选文. 物联网感知层一种基于属性的访问控制机制[J]. J4, 2012, 39(2): 66-72.

REN Fang1;MA Jianfeng1,2;HAO Xuanwen1. Attribute-based access control scheme for the perceptive layer of the Internet of Things[J]. J4, 2012, 39(2): 66-72.

参考文献

［1］ International Telecommunication Union. ITU Internet Reports 2005: the Internet of Things ［R/OL］. ［2010-12-10］. http://www.itu.int/osg/spu/publications/internetofthings/InternetofThings_summary.pdf.
［2］武传坤. 物联网安全架构初探［J］. 中国科学院院刊, 2010, 25(4): 411-419.
Wu Chuankun. A Preliminary Investigation on the Security Architecture of the Internet of things ［J］. Bulletin of Chinese Academy of Sciences, 2010, 25(4): 411-419.
［3］顾晶晶, 陈松灿, 庄毅. 基于无线传感器网络拓扑结构的物联网定位模型［J］. 计算机学报, 2010, 33(9): 1548-1556.
Gu Jingjing, Chen Songcan, Zhuang Yi. Wireless Sensor Network-Based Topology Structures for the Internet of Things Localization［J］. Chinese Journal of Computers, 2010, 33(9): 1548-1556.
［4］ Wang Yong, Attebury G, Ramamurthy B. A Survey of Security Issues in Wireless Sensor Networks［J］. IEEE In Communications Surveys ＆ Tutorials, 2006, 8(2): 2-23.
［5］裴庆琪, 沈玉龙, 马建峰. 无线传感器网络安全技术综述［J］. 通信学报, 2007, 28(8): 113-122.
Pei Qingqi, Shen Yulong, Ma Jianfeng. Survey of Wireless Sensor Network Security Techniques［J］. Journal of Communication, 2007, 28(8): 113-122.
［6］刘云, 裴庆琪. 一种传感器网络访问控制机制［J］. 西安电子科技大学学报, 2010, 37(3): 507-512.
Liu Yun, Pei Qingqi. Access Control Scheme in a Wireless Sensor Network ［J］. Journal of Xidian University, 2010, 37(3): 507-512.
［7］ Banerjee S, Mukhopadhyay D. Symmetric Key Based Authenticated Querying in Wireless Sensor Networks ［C］//Proc of the First International Conference on Integrated Internet Ad Hoc and Sensor Networks. New York: ACM Press, 2006.
［8］ Maccari L, Mainardi L, Marchitt M A, et al. Lightweight, Distributed Access Control for Wireless Sensor Networks Supporting Mobility ［C］//International Conference on Communications 2008 (ICC'08). Beijing: IEEE, 2008: 1441-1445.
［9］ Benenson Z, Gartner F C, Kesdogan D. An Algorithmic Framework for Robust Access Control in Wireless Sensor Networks ［C］//Second European Workshop o n Wireless Sensor Networks (EWSN). Germary: Computer Science, 2005: 158-165.
［10］ Benenson Z, Gedicke N, Raivio O. Realizing Robust User Authentication in Sensor Networks ［C］//Workshop on Real-World Wireless Sensor Networks. Stockholm: Swedish Insitute of Computer Science, 2005: 135-142.
［11］ Watro R, Kong D, Cuti S fen, et al. TinyPK: Securing Sensor Networks with Public Key Technology［C］//Proc of the 2nd ACM workshop on Security of Ad Hoc and Sensor Networks. Washington: ACM Press, 2004: 59-64.
［12］ Sandhu R, Samarati P. Access Control: Principles and Practice ［J］. IEEE Communications Magazine, 1994, 32(9): 40-48.
［13］ Sandhu R, Coyne E J, Feinstein H L, et al. Role-Based Access Control Models ［J］. IEEE Computers, 1996, 29(2): 38-47.
［14］ Zhang X, Li Y, Nalla D. An Attribute-Based Access Matrix Model ［C］//Proc of the 2005 ACM Symposium on Applied Computing. New Mexico: ACM Press, 2005: 359-363.
［15］ Wang L Y, Wijesekera D, Jajodia S. A Logic-Based Framework for Attribute Based Access Control ［C］//Proc of the 2004 ACM Workshop on Formal Methods in Security Engineering. Washington: ACM Press, 2004: 45-55.
［16］ Sahai A, Waters B. Fuzzy Identity Based Encryption ［C］//Proc of Eurocrypt 2005. Berlin: Springer-Verlag, 2005: 457-473.
［17］ Boneh D, Franklin M. Identity-Based Encryption from the Weil Pairing ［C］//Proc of the 21st Annual International Cryptology Conference on Advances in Cryptology. Berlin: Springer-Verlag, 2001: 213-229.

[1]	李明,胡江平,曹晓莉. 异构传感网成本优化的节点部署策略[J]. 西安电子科技大学学报, 2021, 48(4): 11-19.
[2]	李兴华,蔡觉平,李晓龙,王峰,闫振华. T-NTRU物联网动态接入认证技术[J]. 西安电子科技大学学报, 2021, 48(3): 188-196.
[3]	苏景瑞,任光亮,王奇伟,辛吉荣. 卫星物联网中ZigZag-IRSA随机接入方案[J]. 西安电子科技大学学报, 2020, 47(6): 50-57.
[4]	黄影,华雨晴. 能量与路径约束的无线传感网络路由优化[J]. 西安电子科技大学学报, 2020, 47(3): 113-120.
[5]	周杰,徐梦颖,王娇娇,卢毅. 认知无线传感器网络频谱分配的一种改进方法[J]. 西安电子科技大学学报, 2020, 47(3): 80-85.
[6]	杨杰,蒋俊正. 利用联合图模型的传感器网络数据修复方法[J]. 西安电子科技大学学报, 2020, 47(1): 44-51.
[7]	陈博,汪鹏君,李刚. 面向物联网IP核保护的轻量化认证[J]. 西安电子科技大学学报, 2019, 46(5): 62-68.
[8]	田强,冯大政,李进,胡豪爽. 一种利用声音能量的两步SDR定位算法[J]. 西安电子科技大学学报, 2019, 46(4): 16-21.
[9]	谢丽霞,魏瑞炘. 一种面向物联网节点的综合信任度评估模型[J]. 西安电子科技大学学报, 2019, 46(4): 58-65.
[10]	甄岩,赵虎. 层次型软件定义无线传感器网络资源调度策略[J]. 西安电子科技大学学报, 2019, 46(4): 87-98.
[11]	卢毅,周杰,万连城. 一种无线传感器网络二维目标覆盖的改进方法[J]. 西安电子科技大学学报, 2019, 46(2): 101-106.
[12]	马卓然, 马建峰, 苗银宾, 孙聪. 无人机网络中基于状态迁移的访问控制模型[J]. 西安电子科技大学学报, 2018, 45(6): 44-50.
[13]	杨宏宇;宁宇光. 一种云平台动态风险访问控制模型[J]. 西安电子科技大学学报, 2018, 45(5): 80-88.
[14]	苗银宾;马建峰;张俊伟;刘志全. 高效的可验证多关键字密文检索[J]. 西安电子科技大学学报, 2017, 44(4): 18-23+68.
[15]	孟凡振;刘宏;汪明亮;林水样;田彤. 用于物联网的带滤波CMOS低功耗欠采样器设计[J]. 西安电子科技大学学报, 2017, 44(3): 108-113.

物联网感知层一种基于属性的访问控制机制

Attribute-based access control scheme for the perceptive layer of the Internet of Things

PDF (PC)

赞

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

Metrics

本文评价

推荐阅读 10