Access Control Methods of Data Sharing in Cloud Storage Based on Smart Contract

doi:10.3969/j.issn.1671-1122.2021.11.005

Abstract

Abstract:

Cloud storage has become the main method of data storage such as data outsourcing and enterprise data storage. However, the security of cloud storage is facing challenges, and data security urgently needs to implement access control and access auditing to data. Based on the attribute-based access control model, this paper implements static and dynamic access control methods based on smart contracts by storing user attribute information and access history information in the blockchain, which improves system security and user privacy protection. Theoretical analysis and experiments show that the data access control method proposed in this paper can solve the problems of data security and system scalability more effectively.

Key words: cloud storage, access control, blockchain, smart contract

CLC Number:

TP309

WANG Jian, YU Hang, HAN Zhen, HAN Lei. Access Control Methods of Data Sharing in Cloud Storage Based on Smart Contract[J]. Netinfo Security, 2021, 21(11): 40-47.

Figures/Tables 12

References 15

[1]	WANG Yuding, YANG Jiahai, XU Cong, et al. Survey on Access Control Technologies for Cloud Computing[J]. Journal of Software, 2015, 26(5):1129-1150.
	王于丁, 杨家海, 徐聪, 等. 云计算访问控制技术研究综述[J]. 软件学报, 2015, 26(5):1129-1150.
[2]	NOVO O. Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT[J]. IEEE Internet of Things Journal, 2018, 5(2):1184-1195. doi: 10.1109/JIOT.2018.2812239 URL
[3]	NOVO O. Scalable Access Management in IoT Using Blockchain: A Performance Evaluation[J]. IEEE Internet of Things Journal, 2018, 6(3):4694-4701. doi: 10.1109/JIoT.6488907 URL
[4]	OUADDAH A, ABOU ELKALAM A, AIT OUAHMAN A. FairAccess: A New Blockchain-based Access Control Framework for the Internet of Things[J]. Security and Communication Networks, 2016, 9(18):5943-5964. doi: 10.1002/sec.v9.18 URL
[5]	ZHANG Yan, LI Bing, LIU Ben, et al. An Attribute-based Collaborative Access Control Scheme Using Blockchain for IoT Devices[J]. Electronics, 2020, 9(2):285. doi: 10.3390/electronics9020285 URL
[6]	PINNO O J A, GREGIO A R A, DE BONA L C E. Controlchain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT[C]// IEEE. 2017 IEEE Global Communications Conference, December 4-8, 2017, Singapore. New York: IEEE, 2017: 1-6.
[7]	ROUHANI S, BUTTERWORTH L, SIMMONS A D, et al. MediChain TM: A Secure Decentralized Medical Data Asset Management System[C]// IEEE. 2018 IEEE International Conference on Internet of Things(iThings) and IEEE Green Computing and Communications(GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data(SmartData), July 30-Auguest 3, 2018, Halifix, Canada. New Jersey: IEEE, 2018: 1533-1538.
[8]	XIA Qi, SIFAH E B, ASAMOAH K O, et al. MeDShare: Trust-less Medical Data Sharing Among Cloud Service Providers via Blockchain[EB/OL]. https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7990130, 2017-07-24.
[9]	TANWAR S, PAREKH K, EVANS R. Blockchain-based Electronic Healthcare Record System for Healthcare 4.0 Applications[EB/OL]. https://www.sciencedirect.com/science/article/abs/pii/S2214212619306155?via%3Dihub, 2020-12-22.
[10]	ZHANG Yuanyu, KASAHARA S, SHEN Yulong, et al. Smart Contract-based Access Control for the Internet of Things[J]. IEEE Internet of Things Journal, 2018, 6(2):1594-1605. doi: 10.1109/JIoT.6488907 URL
[11]	ROUHANI S, POURHEIDARI V, DETERS R. Physical Access Control Management System Based on Permissioned Blockchain[C]// IEEE. 2018 IEEE International Conference on Internet of Things(iThings) and IEEE Green Computing and Communications(GreenCom) and IEEE Cyber, Physical and Social Computing(CPSCom) and IEEE Smart Data(SmartData), July 30-Auguest 3, 2018, Halifix, Canada. New Jersey: IEEE, 2018: 1078-1083.
[12]	AMOON M, ALTAMEEM T, ALTAMEEM A. RRAC: Role Based Reputed Access Control Method for Mitigating Malicious Impact in Intelligent IoT Platforms[EB/OL]. https://www.sciencedirect.com/science/article/abs/pii/S0140366419316159, 2020-12-23.
[13]	PAL S, RABEHAJA T, HILL A, et al. On the Integration of Blockchain to the Internet of Things for Enabling Access Right Delegation[J]. IEEE Internet of Things Journal, 2020, 7(4):2630-2639. doi: 10.1109/JIoT.6488907 URL
[14]	PAILLISSE J, SUBIRA J, LOPEZ A, et al. Distributed Access Control with Blockchain[C]// IEEE. ICC 2019-2019 IEEE International Conference on Communications(ICC), May 20-24, 2019, Shanghai, China. New Jersey: IEEE, 2019: 1-6.
[15]	ROUHANI S, DETERS R. Blockchain Based Access Control Systems: State of the Art and Challenges[C]// IEEE. IEEE/WIC/ACM International Conference on Web Intelligence, October 14-17, 2019, Thessaloniki, Greece. New Jersey: IEEE, 2019: 423-428.

信息项	含义
UserPk	用户公钥
Attribute	用户属性

信息项	含义
UserPk	用户公钥
DataHash	共享数据文件哈希值
Misbehavior	恶意行为
LastTime	最近一次恶意行为发生时间
Pently	惩罚时间

信息项	含义
DataInfo	数据的描述信息,由数据所有者提供
DataHash	共享数据的Hash值
AcInfo	数据所有者定义的访问控制规则
DoPk	数据所有者公钥

变量和方法名	信息项	含义
Verify()	Verify(Attribute, AcInfo)	判断属性是否满足访问控制规则
Time	Time	请求的时间戳
MI	MinlInterval	两个连续请求间最小时间间隔
IH	IllegalHistory	非法访问行为的历史记录
IH.Number	IH.Number	近期发生非法访问行为的次数
IH.Pently	IH.Pently	发生非法访问行为给予的惩罚时间
IH.LastTime	IH.LastTime	最近一次发生非法访问行为的时间戳
IT	IllegalThreshold	非法访问行为次数的阈值
IP	IllegalPently	非法访问行为的惩罚时间
MH	MisBehaviourHistory	恶意行为历史记录
MH.Number	MH.Number	近期频繁访问的次数
MH.Pently	MH.Pently	发生频繁访问行为给予的惩罚时间
MH.LastTime	MH.LastTime	最近发生频繁访问行为的时间戳
MT	MisBehaviourThreshold	恶意行为次数的阈值
MP	MisBehaviourPently	判定为恶意行为时给予的惩罚时间

安全性	本文方案	文献[10]方案	文献[13]方案	文献[14]方案
抗重放攻击	√	√	√	√
抗中间人攻击	√	√	√	√
抗女巫攻击	√	○	○	√
抗合谋攻击	√	√	√	√
共享数据隐私保护	√	√	√	√
访问控制策略隐私保护	×	×	×	√
用户属性信息隐私保护	√	○	√	○
动态访问控制权限验证	√	√	×	×