Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario

The rapid development of the Internet of Things (IoT) and the explosive growth of valuable data produced by user equipment have led to strong demand for access control, especially hierarchical access control, which is performed from a group communication perspective. However, the key management stra...

Full description

Bibliographic Details
Main Authors: Mingxin Ma, Guozhen Shi, Fenghua Li
Format: Article
Language:English
Published: IEEE 2019-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8664491/
_version_ 1818618370361131008
author Mingxin Ma
Guozhen Shi
Fenghua Li
author_facet Mingxin Ma
Guozhen Shi
Fenghua Li
author_sort Mingxin Ma
collection DOAJ
description The rapid development of the Internet of Things (IoT) and the explosive growth of valuable data produced by user equipment have led to strong demand for access control, especially hierarchical access control, which is performed from a group communication perspective. However, the key management strategies for such a future Internet are based mostly on a trusted third party that requires full trust of the key generation center (KGC) or central authority (CA). Recent studies indicate that centralized cloud centers will be unlikely to deliver satisfactory services to customers because we place too much trust in third parties; therefore, these centers do not apply to user privacy-oriented scenarios. This paper addresses these issues by proposing a novel blockchain-based distributed key management architecture (BDKMA) with fog computing to reduce latency and multiblockchains operated in the cloud to achieve cross-domain access. The proposed scheme utilizes blockchain technology to satisfy the decentralization, fine-grained auditability, high scalability, and extensibility requirements, as well as the privacy-preserving principles for hierarchical access control in IoT. We designed system operations methods and introduced different authorization assignment modes and group access patterns to reinforce the extensibility. We evaluated the performance of our proposed architecture and compared it with existing models using various performance measures. The simulation results show that the multiblockchain structure substantially improves system performance, and the scalability is excellent as the network size increases. Furthermore, dynamic transaction collection time adjustment enables the performance and system capacity to be optimized for various environments.
first_indexed 2024-12-16T17:20:31Z
format Article
id doaj.art-4b76780c0c754a558e5ac07e060c6d68
institution Directory Open Access Journal
issn 2169-3536
language English
last_indexed 2024-12-16T17:20:31Z
publishDate 2019-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj.art-4b76780c0c754a558e5ac07e060c6d682022-12-21T22:23:10ZengIEEEIEEE Access2169-35362019-01-017340453405910.1109/ACCESS.2019.29040428664491Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT ScenarioMingxin Ma0https://orcid.org/0000-0001-5349-7362Guozhen Shi1Fenghua Li2School of Cyber Engineering, Xidian University, Xi’an, ChinaSchool of Information Security, Beijing Electronic Science and Technology Institute, Beijing, ChinaState Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, ChinaThe rapid development of the Internet of Things (IoT) and the explosive growth of valuable data produced by user equipment have led to strong demand for access control, especially hierarchical access control, which is performed from a group communication perspective. However, the key management strategies for such a future Internet are based mostly on a trusted third party that requires full trust of the key generation center (KGC) or central authority (CA). Recent studies indicate that centralized cloud centers will be unlikely to deliver satisfactory services to customers because we place too much trust in third parties; therefore, these centers do not apply to user privacy-oriented scenarios. This paper addresses these issues by proposing a novel blockchain-based distributed key management architecture (BDKMA) with fog computing to reduce latency and multiblockchains operated in the cloud to achieve cross-domain access. The proposed scheme utilizes blockchain technology to satisfy the decentralization, fine-grained auditability, high scalability, and extensibility requirements, as well as the privacy-preserving principles for hierarchical access control in IoT. We designed system operations methods and introduced different authorization assignment modes and group access patterns to reinforce the extensibility. We evaluated the performance of our proposed architecture and compared it with existing models using various performance measures. The simulation results show that the multiblockchain structure substantially improves system performance, and the scalability is excellent as the network size increases. Furthermore, dynamic transaction collection time adjustment enables the performance and system capacity to be optimized for various environments.https://ieeexplore.ieee.org/document/8664491/Blockchainfog computinghierarchical key managementInternet of Things
spellingShingle Mingxin Ma
Guozhen Shi
Fenghua Li
Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
IEEE Access
Blockchain
fog computing
hierarchical key management
Internet of Things
title Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
title_full Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
title_fullStr Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
title_full_unstemmed Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
title_short Privacy-Oriented Blockchain-Based Distributed Key Management Architecture for Hierarchical Access Control in the IoT Scenario
title_sort privacy oriented blockchain based distributed key management architecture for hierarchical access control in the iot scenario
topic Blockchain
fog computing
hierarchical key management
Internet of Things
url https://ieeexplore.ieee.org/document/8664491/
work_keys_str_mv AT mingxinma privacyorientedblockchainbaseddistributedkeymanagementarchitectureforhierarchicalaccesscontrolintheiotscenario
AT guozhenshi privacyorientedblockchainbaseddistributedkeymanagementarchitectureforhierarchicalaccesscontrolintheiotscenario
AT fenghuali privacyorientedblockchainbaseddistributedkeymanagementarchitectureforhierarchicalaccesscontrolintheiotscenario