Department Information Management, Chang Gung University, Taoyuan 33302, Taiwan.
Graduate Institute of Business and Management, Chang Gung University, Taoyuan 33302, Taiwan.
Sensors (Basel). 2020 Nov 12;20(22):6471. doi: 10.3390/s20226471.
As the Internet of Things (IoT) has become prevalent, a massive number of logs produced by IoT devices are transmitted and processed every day. The logs should contain important contents and private information. Moreover, these logs may be used as evidences for forensic investigations when cyber security incidents occur. However, evidence legality and internal security issues in existing works were not properly addressed. This paper proposes an autonomous log storage management protocol with blockchain mechanism and access control for the IoT. Autonomous model allows sensors to encrypt their logs before sending it to gateway and server, so that the logs are not revealed to the public during communication process. Along with blockchain, we introduce the concept "". The integration of blockchain and signature chain provides efficient management functions with valuable security properties for the logs, including robust identity verification, data integrity, non-repudiation, data tamper resistance, and the legality. Our work also employs attribute-based encryption to achieve fine-grained access control and data confidentiality. The results of security analysis using AVSIPA toolset, GNY logic and semantic proof indicate that the proposed protocol meets various security requirements. Providing good performance with elliptic curve small key size, short BLS signature, efficient signcryption method, and single sign-on solution, our work is suitable for the IoT.
随着物联网（IoT）的普及，每天都有大量的物联网设备生成的日志被传输和处理。这些日志应该包含重要的内容和私人信息。此外，当网络安全事件发生时，这些日志可能会被用作取证调查的证据。然而，现有工作中并没有妥善解决证据合法性和内部安全问题。本文提出了一种具有区块链机制和访问控制的物联网自主日志存储管理协议。自主模型允许传感器在将日志发送到网关和服务器之前对其进行加密，从而在通信过程中不会向公众透露日志。我们还结合区块链引入了“”的概念。区块链和签名链的集成提供了高效的管理功能，为日志提供了有价值的安全属性，包括强大的身份验证、数据完整性、不可否认性、数据篡改抵抗性和合法性。我们的工作还采用基于属性的加密来实现细粒度的访问控制和数据机密性。使用 AVSIPA 工具集、GNY 逻辑和语义证明进行的安全分析结果表明，所提出的协议满足各种安全要求。我们的工作使用椭圆曲线小密钥大小、短 BLS 签名、高效的签密方法和单点登录解决方案提供了良好的性能，非常适合物联网。
