Tong Weiming, Yang Luyao, Li Zhongwei, Jin Xianji, Tan Liguo
Laboratory for Space Environment and Physical Sciences, Harbin Institute of Technology, Harbin 150001, China.
School of Electrical Engineering and Automation, Harbin Institute of Technology, Harbin 150001, China.
Sensors (Basel). 2024 Feb 5;24(3):1035. doi: 10.3390/s24031035.
To address the complexities, inflexibility, and security concerns in traditional data sharing models of the Industrial Internet of Things (IIoT), we propose a blockchain-based data sharing and privacy protection (BBDSPP) scheme for IIoT. Initially, we characterize and assign values to attributes, and employ a weighted threshold secret sharing scheme to refine the data sharing approach. This enables flexible combinations of permissions, ensuring the adaptability of data sharing. Subsequently, based on non-interactive zero-knowledge proof technology, we design a lightweight identity proof protocol using attribute values. This protocol pre-verifies the identity of data accessors, ensuring that only legitimate terminal members can access data within the system, while also protecting the privacy of the members. Finally, we utilize the InterPlanetary File System (IPFS) to store encrypted shared resources, effectively addressing the issue of low storage efficiency in traditional blockchain systems. Theoretical analysis and testing of the computational overhead of our scheme demonstrate that, while ensuring performance, our scheme has the smallest total computational load compared to the other five schemes. Experimental results indicate that our scheme effectively addresses the shortcomings of existing solutions in areas such as identity authentication, privacy protection, and flexible combination of permissions, demonstrating a good performance and strong feasibility.
为解决工业物联网(IIoT)传统数据共享模型中的复杂性、灵活性和安全问题,我们提出了一种基于区块链的工业物联网数据共享与隐私保护(BBDSPP)方案。首先,我们对属性进行特征描述和赋值,并采用加权阈值秘密共享方案来优化数据共享方法。这使得权限能够灵活组合,确保了数据共享的适应性。随后,基于非交互式零知识证明技术,我们使用属性值设计了一种轻量级身份证明协议。该协议预先验证数据访问者的身份,确保只有合法的终端成员才能访问系统内的数据,同时也保护了成员的隐私。最后,我们利用星际文件系统(IPFS)来存储加密的共享资源,有效解决了传统区块链系统中存储效率低的问题。对我们方案的计算开销进行的理论分析和测试表明,在确保性能的同时,与其他五种方案相比,我们的方案总计算负载最小。实验结果表明,我们的方案有效解决了现有解决方案在身份认证、隐私保护和权限灵活组合等方面的不足,具有良好的性能和较强的可行性。