|
|
Blockchain-based trusted distributed industrial data governance scheme |
Rong HUANG1,2,3( ),Wenqin YANG1,2,3,*( ),Zhigang SONG1,2,3 |
1. The Academy of Digital China(Fujian), Fuzhou University, Fuzhou 350003, China 2. Key Laboratory of Spatial Data Mining andInformation Sharing of Ministry of Education, Fuzhou University, Fuzhou 350108, China 3. National and Local Joint EngineeringResearch Center of Satellite Geospatial Information Technology, Fuzhou University, Fuzhou 350108, China |
|
|
Abstract A trusted distributed industrial data governance solution was designed based on blockchain technology in order to address the issue of the lack of a unified product data sharing service in current industrial systems, which limited users’ access to credible product traceability information. This solution enabled efficient and secure product data sharing and governance. Product data was compressed and encrypted off-chain by the data generator before it was submitted to the blockchain system. The system supported off-chain/on-chain data access through two types of blockchain transactions (producer transactions and data transactions) in order to ensure the availability of product data during the off-chain process. A hybrid access control mechanism was implemented to encrypt product data and share secret keys exclusively with authorized data users. This solution effectively protected the privacy of product data, provided fine-grained access control, and ensured end-to-end traceability of the entire product data generation process. Performance tests showed that the computation and communication costs during the key generation phase did not exceed 81.592 ms and 2.83 kB respectively on the secp256k1 elliptic curve (providing 128 bit security). The data submission phase incured cost of no more than 50.251 ms and 3.59 kB, the data update phase did not exceed 251.596 ms, and the data retrieval time remained under 311.104 ms. Performance comparisons with similar schemes confirmed the efficiency of this solution.
|
Received: 22 December 2023
Published: 11 February 2025
|
|
Fund: 中央引导地方科技发展专项资助项目(2022L3003). |
Corresponding Authors:
Wenqin YANG
E-mail: front@fzu.edu.cn;ywq@fzu.edu.cn
|
基于区块链的可信分布式工业数据治理方案
针对当前工业系统缺乏统一的产品数据共享服务,限制了用户获取可信的产品追溯信息的问题,基于区块链设计可信分布式工业数据治理方案,实现高效、安全的产品数据共享与治理. 产品数据生成者将数据提交到区块链系统之前,在离链状态下对产品数据进行压缩和加密. 为了在离链过程中使产品数据可用,系统通过2种类型的区块链交易(生成者交易和数据交易)支持离链/链上数据访问. 提供混合访问控制机制用于加密产品数据,将秘密密钥仅提供给经过授权的数据用户. 该方案能够有效地保护产品数据的隐私性,提供细粒度的访问控制,能够对产品数据生成的全流程进行溯源. 系统性能的测试结果表明,在secp256k1椭圆曲线上(提供128 bit安全性),密钥生成阶段的计算和通信开销不高于81.592 ms和2.83 kB,数据提交阶段不高于50.251 ms和3.59 kB,数据更新时间不超过251.596 ms,数据读取时间不高于311.104 ms. 与同类方案的性能比较结果证实了该方案的高效性.
关键词:
区块链,
数据可信治理,
隐私保护,
细粒度访问控制,
全流程溯源
|
|
[1] |
ZHANG Yongpin, XU Xiwei, LIU Ang, et al Blockchain-based trust mechanism for IoT-based smart manufacturing system[J]. IEEE Transactions on Computational Social Systems, 2019, 6 (6): 1386- 1394
doi: 10.1109/TCSS.2019.2918467
|
|
|
[2] |
GARCIA R D, RAMACHANDRAN G S, JURDAK R, et al Blockchain-aided and privacy-preserving data governance in multi-stakeholder applications[J]. IEEE Transactions on Network and Service Management, 2022, 19 (4): 3781- 3793
doi: 10.1109/TNSM.2022.3225254
|
|
|
[3] |
XU Tianyi, QIU Tie, HU Dengcheng, et al A scalable two-layer blockchain system for distributed multi-cloud storage in IIoT[J]. IEEE Transactions on Industrial Informatics, 2022, 18 (12): 9173- 9183
doi: 10.1109/TII.2022.3179733
|
|
|
[4] |
杨业平, 林德威, 黄芳芳, 等. 基于区块链的物联网安全数据共享系统[J]. 福州大学学报: 自然科学版, 2021, 49(6): 739-746. YANG Yeping, LIN Dewei, HUANG Fangfang, et al. A blockchain-based secure data sharing system for the internet of things [J]. Journal of Fuzhou University: Natural Science Edition , 2021, 49(6): 739-746.
|
|
|
[5] |
宁建廷, 黄欣沂, 魏立斐, 等 支持恶意用户追踪的属性基云数据共享方案[J]. 计算机学报, 2022, 45 (7): 1431- 1445 NING Jianting, HUANG Xinyi, WEI Lifei, et al An attribute-based cloud data sharing scheme supporting malicious user tracking[J]. Journal of Chinese Computer Science, 2022, 45 (7): 1431- 1445
doi: 10.11897/SP.J.1016.2022.01431
|
|
|
[6] |
张建标, 张兆乾, 徐万山, 等 一种基于区块链的域间访问控制模型[J]. 软件学报, 2021, 32 (5): 1547- 1564 ZHANG Jianbiao, ZHANG Zhaoqian, XU Wanshan, et al A blockchain-based inter-domain access control model[J]. Journal of Software, 2021, 32 (5): 1547- 1564
|
|
|
[7] |
WANG Chao, WANG Shuo, CHENG Xiaoman, et al A privacy and efficiency-oriented data sharing mechanism for IoTs[J]. IEEE Transactions on Big Data, 2022, 8 (1): 174- 185
|
|
|
[8] |
CHRISTIAN C. Architecture of the hyperledger blockchain fabric [C]// Workshop on Distributed Cryptocurrencies and Consensus Ledgers . Chicago: ACM, 2016: 14-17.
|
|
|
[9] |
YANNIS R, BRENT W. Practical constructions and new proof methods for large universe attribute-based encryption [C]// ACM Sigsac Conference on Computer and Communications Security . Berlin: ACM, 2013: 463-474.
|
|
|
[10] |
DAN B, CRAIG G, BEN L, et al. Aggregate and verifiably encrypted signatures from bilinear maps [C]// Annual International Cryptology Conference . Warsaw: Springer, 2003: 416-432.
|
|
|
[11] |
DATTA P, KOMARGODSKI I, WATERS B. Fully adaptive decentralized multi-authority ABE [C]// Theory and Applications of Cryptographic Techniques. Lyon: Springer. 2023: 447-478.
|
|
|
[12] |
YANG Yang, DENG R, GUO Wenzhong, et al Dual traceable distributed attribute-based searchable encryption and ownership transfer[J]. IEEE Transactions on Cloud Computing, 2021, 11 (1): 247- 262
|
|
|
[13] |
LI Wei, XUE Kaiping, XUE Yingjie, et al TMACS: a robust and verifiable threshold multi-authority access control system in public cloud storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2016, 27 (5): 1484- 1496
doi: 10.1109/TPDS.2015.2448095
|
|
|
[14] |
JOSEPH A, CHRISTINA G, IAN M, et al Charm: a framework for rapidly prototyping cryptosystems[J]. Journal of Cryptographic Engineering, 2013, 3 (2): 111- 128
doi: 10.1007/s13389-013-0057-3
|
|
|
[15] |
JOAN D, CRISTINA P, JORDI H. The Bitcoin P2P network [C]// Conference on Financial Cryptography . ChristChurch: Springer, 2014: 87–102.
|
|
|
|
Viewed |
|
|
|
Full text
|
|
|
|
|
Abstract
|
|
|
|
|
Cited |
|
|
|
|
|
Shared |
|
|
|
|
|
Discussed |
|
|
|
|