基于属性的物联网感知层访问控制方案

doi:10.16180/j.cnki.issn1007-7820.2019.09.012

Abstract

Abstract:

The perception layer of the IOT contained large sum of environmental data and personal information. Therefore, a strict definition of data access was of great importance for information security and privacy protection of the IOT. Based on the traditional access control model, the concept of attribute was introduced and a proposal of attribute-based access control was proposed. In this proposal, the principal access authority was determined according to the attribute of subject, object, the permission and the environment. The attributed-based access control was superior for its characteristics of strong flexibility, relatively simple control and strong expansibility. It was suitable to the dynamic and large-scale environment and was conducive to solving the problems of access control for the perception layer of the IOT.

Key words: the Internet of things, perception layer, access control, attribute-based, information security, privacy protection

CLC Number:

TP393

LIU Chen,MA Sijun,NI Xueli. Attribute-Based Access Control for the Perception Layer of The Internet of Things[J].Electronic Science and Technology, 2019, 32(9): 55-59.

Figures/Tables 6

Table 1

Figure 1.

Figure 2.

Figure 3.

Figure 4.

Figure 5.

References 16

[1]	刘云浩 . 物联网导论[M]. 北京: 科学出版社, 2010.
	Liu Yunhao. Introduction to the Internet of things [M]. Beijing: Science Press, 2010.
[2]	王保云 . 物联网技术研究综述[J]. 电子测量与仪器学报, 2009,23(12):1-7.
	Wang Baoyun . Overview of research on Internet of things[J]. Journal of Electronic Measurement and Instrumentation, 2009,23(12):1-7.
[3]	孙其博, 刘杰, 黎羴 , 等 .物联网: 概念、架构与关键技术研究综述[J]. 北京邮电大学学报, 2010,33(3):1-9.
	Sun Qibo, Liu Jie, Li Qi , et al. The Internet of things: a review of concepts, architectures and key technologies[J]. Journal of Beijing University of Posts and Telecommunications, 2010,33(3):1-9.
[4]	杨光, 耿贵宁, 都婧 , 等. 物联网安全威胁与措施[J]. 清华大学学报:自然科学版, 2011,51(10):1335-1340.
	Yang Guang, Geng Guining, Du Jing , et al. Internet of things security threats and measures[J]. Journal of Tsinghua University:Natural Science Edition, 2011,51(10):1335-1340.
[5]	于旭, 梅文 . 物联网信息安全[M]. 西安: 西安电子科技大学出版社, 2014.
	Yu Xu, Mei Wen. Information security of the Internet of things[M]. Xi’an: Xidian University Press, 2014.
[6]	胡柳, 王梅, 邓杰 , 等. 大数据环境下的隐私保护研究[J]. 电子科技, 2017,30(7):159-161.
	Hu Liu, Wang Mei, Deng Jie , et al. Privacy protection in large data environment[J]. Electronic Science and Technology, 2017,30(7):159-161.
[7]	马纪丰, 梁浩 . 物联网感知层信息安全分析与建议[J]. 现代电子技术, 2012,35(19):76-78.
	Ma Jifeng, Liang Hao . Information security analysis and suggestions for the perception layer of the Internet of things[J]. Modern Electronic Technology, 2012,35(19):76-78.
[8]	张静, 葛丽娜, 刘金辉 , 等. 物联网感知层中隐私保护方法研究[J]. 计算机应用与软件, 2016,33(5):293-297.
	Zhang Jing, Ge Lina, Liu Jinhui , et al. Research on privacy protection methods in the perception layer of the Internet of thing[J]. Computer Applications and Software, 2016,33(5):293-297.
[9]	马紫宁, 马一鸣, 王世志 . 射频识别系统安全防范策略[J]. 电子科技, 2015,28(11):170-172.
	Ma Zining, Ma Yiming, Wang Shizhi . Security strategy for RFID System[J]. Electronic Science and Technology, 2015,28(11):170-172.
[10]	辜晟恩 . 物联网感知层的信息安全保障措施[J].电子技术与软件工程, 2017(22):204-208.
	Gu Shengen . Information security measures for the perceptual layer of the Internet of things[J].Electronic Technology and Software Engineering, 2017(22):204-208.
[11]	李凤华, 苏铓, 史国振 , 等. 访问控制模型研究进展及发展趋势[J]. 电子学报, 2012,40(4):805-813. doi: 10.3969/j.issn.0372-2112.2012.04.030
	Li Fenghua, Su Di, Shi Guozhen , et al. Research progress and development trend of access control model[J]. Journal of Electronics, 2012,40(4):805-813. doi: 10.3969/j.issn.0372-2112.2012.04.030
[12]	韩道军, 高洁, 翟浩良 , 等. 访问控制模型研究进展[J]. 计算机科学, 2010,37(11):29-33.
	Han Daojun, Gao Jie, Zhai Haoliang , et al. Research progress on access control model[J]. Computer Science, 2010,37(11):29-33.
[13]	蔡婷, 陈昌志, 欧阳凯 , 等. 改进的物联网感知层访问控制策略[J]. 计算机工程与科学, 2015,37(7):1265-1271.
	Cai Ting, Chen Changzhi, Ouyang Kai , et al. Improved Internet of things perception layer access control strategy[J]. Computer Engineering and Science, 2015,37(7):1265-1271.
[14]	马骏 . 物联网感知环境分层访问控制机制研究[D]. 西安:西安电子科技大学, 2014.
	Ma Jun . Research on hierarchical access control mechanism of Internet of things perception environment[D]. Xi’an:Xidian University, 2014.
[15]	罗洪, 杨杰 . 物联网环境下的访问控制技术探析[J]. 西南民族大学学报:自然科学版, 2016,42(6):665-670.
	Luo Hong, Yang Jie . Analysis of access control technology under the Internet of things[J]. Journal of Southwest University for Nationalities:Natural Science Edition, 2016,42(6):665-670.
[16]	张玉婷, 严承华, 魏玉人 . 基于节点认证的物联网感知层安全性问题研究[J].信息网络安全, 2015(11):27-32.
	Zhang Yuting, Yan Chenghua, Wei Yuren . Research on the security of the perceptual layer of Internet of things based on node authentication[J].Information Network Security, 2015(11):27-32.

	种类	说明
物理攻击	物理损坏	感知节点应用场景复杂多样,易于受到自然损害或人为破坏,导致节点无法正常工作
	非法盗窃	因缺乏监管,终端设备被盗窃、破解,导致用户敏感信息泄露,影响系统安全
身份攻击	假冒攻击	攻击者非法获取用户身份信息,并冒充该用户进入系统,越权访问合法资源或享受服务
	非法替换	攻击者替换原有的感知层节点设备,系统无法识别替换后的节点身份,导致信息感知异常
资源攻击	信道堵塞	攻击者恶意占用信道,导致信道被堵塞,不能正常传送数据
	耗尽资源	攻击者通过不停向节点发送无效请求,占用节点的计算、存储资源,影响节点正常工作
	重放攻击	攻击者截获各种信息后重新发送给系统,诱导感知节点做出错误的决策

Attribute-Based Access Control for the Perception Layer of The Internet of Things

RichHTML

PDF (PC)

Like

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 6

References 16

Related Articles 15

Metrics

Comments

Recommended 0

[1]	HE Shaofang,ZHOU Li. Anonymous Interaction Algorithm of Access Control in Searchable Voice Encryption Mechanism [J]. Electronic Science and Technology, 2021, 34(4): 1-5.
[2]	JIN Xin,FENG Yi,YOU Xuexi,WANG Jiaxin. Research on Information Security Equipment Deployment Guarantee Technology [J]. Electronic Science and Technology, 2020, 33(8): 80-86.
[3]	ZHA Hongze. Research on Information Security Evaluation Algorithm Based on Hierarchical Protection [J]. Electronic Science and Technology, 2019, 32(11): 78-82.
[4]	DAI Wenting,WANG Yagang,CAI Jiejie. An Intelligent LED Lighting Control System Based on the Internet of Things [J]. , 2016, 29(3): 93-.
[5]	LIU Wei. The Design of Smart Home System Based on ZigBee Technology [J]. , 2016, 29(11): 51-.
[6]	XU Zhi. A Spectrum Feature Based Algorithm for Hiding Information in Digital Audio [J]. , 2015, 28(8): 84-.
[7]	ZHOU Sheng,ZHAO Junyi,GE Yuanpeng. Construction of a Combination of Active and Passive Defense of Smart Grid Information Security System [J]. , 2015, 28(6): 213-.
[8]	LI Haixiong,LIU Wenshuai,HE Zejun,TANG Hong. Explosive Gated Quota Monitoring System Based on Two-dimensional Code [J]. , 2015, 28(2): 75-.
[9]	YAO Shu-Guang. A Trusted Network Information Security Technology for the E-commerce Platform [J]. , 2014, 27(1): 153-.
[10]	YAN Lin,LU Chen,ZHANG Qiyun. A WiMAX Access Authentication Method Based on ECC [J]. , 2013, 26(9): 44-.
[11]	PENG Yang,MENG Lilin,LI Nian,LI Li. Design and Implementation of the High-speed Encryption Card Based on FPGA [J]. , 2013, 26(6): 42-.
[12]	YANG Wenwu,DA Dongxu,HUANG Junlin,DONG Jie. Design of Cold Chain Logistics Monitoring System [J]. , 2013, 26(3): 116-.
[13]	HAN Jinsen,ZOU Tao,ZHANG Longjun. Research on Traitor Tracing Technology [J]. , 2012, 25(11): 105-.
[14]	WANG Yi-Kai, LI Yang-Jie, ZHOU Shao-Fu, ZHANG Dong, LIU Yang. A Bus Information Query System Based on the Internet of Things [J]. , 2012, 25(10): 32-.
[15]	SHANG Ying, ZHANG Kai-Ran. Storage Monitor Technology Based on Windows API [J]. , 2011, 24(7): 152-.