Аннотация. 

An Ethereum-based integrated access control is proposed in this paper to provide a scalable access control since the policies are not related to users, instead they are related to the attributes which provide more generic and scalable way to handle the increase of users in the future. Proposed Ethereum-based ABAC framework includes several principal elements: users, Ethereum, a ChainLink gateway, IPSF, and devices. This Ethereum-based system utilizes smart contracts (SCs) to facilitate access control like AccessRequestContract, AdminPolicyManager, IoTDataManager, PolicyEvaluator, IPFSDataHandler, and ChainLinkOracleAdapter. Storing data on distributed system like IPFS and using Chainlink to handle communications between on/off-chain brings more efficient to the proposed model. Together, these components enable our proposed model to deliver distributed, efficient, and immutable access control management for the IoT devices.

Ключевые слова: Ethereum, Blockchain, ABAC, Chainlink, IPFS.

PP. 29-34.

DOI: 10.14357/20790279240104 

EDN: IBRCUX

 

References

1. Shahid H. et al. “Machine learning-based mist computing enabled Internet of Battlefield Things,” ACM Trans. Internet Technol., vol. 21, no. 4, pp. 1–26, 2021.

2. Andaloussi Y., El Ouadghiri M.D., Maurel Y., Bonnin J.-M. and Chaoui H. “Access control in IoT environments: Feasible scenarios,” Procedia Comput. Sci., vol. 130, pp. 1031–1036, 2018.

3. Deebak B.D. and Fadi A.-T. “Privacy-preserving in smart contracts using blockchain and artificial intelligence for cyber risk measurements,” J. Inf. Secur. Appl., vol. 58, p. 102749, 2021.

4. Norvill R., Pontiveros B.B.F., State R., and Cullen A. “IPFS for reduction of chain size in Ethereum,” in 2018 IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData), 2018, pp. 1121–1128.

5. Breidenbach L. et al. “Chainlink 2.0: Next steps in the evolution of decentralized oracle networks,” Chain. Labs, vol. 1, pp. 1–136, 2021.

6. Ouaddah A. “A blockchain based access control framework for the security and privacy of IoT with strong anonymity unlinkability and intractability guarantees,” in Advances in Computers, vol. 115, Elsevier, 2019, pp. 211–258.

7. Figueroa S., Añorga J., Arrizabalaga S., Irigoyen I. and Monterde M. “An attribute-based access control using chaincode in RFID systems,” in 2019 10th IFIP international conference on new technologies, mobility and security (NTMS), 2019, pp. 1–5.

8. Cruz J.P., Kaji Y. and Yanai N. “RBAC-SC: Rolebased access control using smart contract,” Ieee

Access, vol. 6, pp. 12240–12251, 2018.

9. Liu H., Han D. and Li D. “Fabric-IoT: A blockchain-based access control system in IoT,” IEEE Access, vol. 8, pp. 18207–18218, 2020.