论文标题
智能城市的基于属性的访问控制：智能合同驱动的框架
Attribute-Based Access Control for Smart Cities: A Smart Contract-Driven Framework
论文作者
论文摘要
智能城市中有效且可靠的访问控制对于保护各种资源以进行决策和任务执行至关重要。现有的集中式访问控制方案遭受了单点故障，低可靠性和可扩展性差的局限性。因此，本文通过组合区块链智能合约技术和基于属性的访问控制（ABAC）模型，为智能城市提出了一个分布式可靠的访问控制框架。该框架由一项用于管理ABAC政策的政策管理合同（PMC），一个主题属性管理合同（SAMC）用于管理主题的属性（即访问资源的实体），一个对象属性管理合同（OAMC）用于管理对象的属性（即访问资源），以及一个访问控制合同（ACP控制）（ACP控制）（ACP）（ACP）（ACC）（ACP）。为了显示拟议框架的可行性，我们构建了一个本地的私人以太坊区块链系统来实施四个智能合约，并进行实验以评估货币成本，并将提议的框架与现有访问控制列表（ACL）基于基于的方案进行比较。实验结果表明，尽管拟议的计划在部署阶段所消耗的钱比基于ACL的计划要多，但在系统运行期间，尤其是对于大型大型智能城市，它引入了较少的货币成本。
Efficient and reliable access control in smart cities is critical for the protection of various resources for decision making and task execution. Existing centralized access control schemes suffer from the limitations of single point of failure, low reliability and poor scalability. This paper therefore proposes a distributed and reliable access control framework for smart cities by combining the blockchain smart contract technology and the Attribute-Based Access Control (ABAC) model. The framework consists of one Policy Management Contract (PMC) for managing the ABAC policies, one Subject Attribute Management Contract (SAMC) for managing the attributes of subjects (i.e., entities accessing resources), one Object Attribute Management Contract (OAMC) for managing the attributes of objects (i.e., resources being accessed), and one Access Control Contract (ACC) for performing the access control. To show the feasibility of the proposed framework, we construct a local private Ethereum blockchain system to implement the four smart contracts and also conduct experiments to evaluate the monetary cost as well as to compare the proposed framework with an existing Access Control List (ACL)-based scheme. The experimental results show that although the proposed scheme consumes more money than the ACL-based scheme at the deployment stage, it introduces less monetary cost during the system running especially for large-scale smart cities.
