摘要
物联网的最大缺点是缺少设备间的互信机制,为确保物联网系统内部数据与设备安全,首先需要对系统中所有物联网设备进行身份认证。一旦中心数据库出现故障,整个物联网都将陷入瘫痪状态。根据物联网设备数据安全存储系统的需求分析,设计一种基于区块链的物联网智能合约模型(BC-SC模型),利用区块链点对点的分布式架构建立可信的交易环境,实现机器对机器(M2M)、人与机器相互信任模型。其中,BC-SC模型将网络中的节点按照存储能力区分为主节点与次节点,主节点实现系统中的数据验证功能,并结合国密SM9算法向轻节点分配具有身份标识的密钥,实现M2M双向认证。为保证数据的可信性,通过在该模型中选择混合加密方式,同时根据智能合约灵活安全的特性完成物联网设备部署,从而增强了整个系统的安全性。
The biggest drawback of the IoT is the lack of mutual trust between devices.In order to ensure the security of data and devices within the IoT system,all IoT devices in the system need to be authenticated first.Once the central database fails,the entire IoT will be paralysed.Based on the requirement analysis of data security storage system for IoT devices,a blockchain-based IoT smart contract model(BC-SC model)is designed to establish a trustworthy transaction environment using blockchain peer-to-peer distributed architecture to realise machineto-machine(M2M)and human-to-machine mutual trust models.Among them,the BC-SC model distinguishes the nodes in the network according to their storage capacity as primary and secondary nodes,and the primary node realises the data verification function in the system,and distributes keys with identity identification to the light nodes in combination with the State Secrets SM9 algorithm to achieve M2M two-way authentication;in order to ensure the trustworthiness of the data,it is ensured by choosing a hybrid encryption method in this model,and at the same time,according to the flexible and secure smart contract In order to ensure the trustworthiness of the data,it is ensured by choosing a hybrid encryption method in this model,while the deployment of IoT devices is completed according to the flexible and secure characteristics of smart contracts,thus enhancing the security of the whole system.
作者
薛慧
沈勇
时岳
高翩翩
XUE Hui;SHEN Yong;SHI Yue;GAO Pian-pian(Institute of Computer Science,Jiangsu University of Science and Technology,Zhenjiang 212003,China)
出处
《软件导刊》
2022年第6期161-168,共8页
Software Guide
