An IoT-Applicable Access Control Model Under Double-Layer Blockchain

Abstract

Access control in Internet of Things (IoT) systems has long been facing with single-point-of-failure, collusion and other security issues. Deploying most of the access control procedures on blockchain makes it more trustworthy. However, the miscellaneous transaction data on the public blockchain incurs an extra burden on computing and communication overhead, which hinders its application for IoT devices. Additionally, the demands of rapid response in industrial IoT scenarios (e.g., edge computing scenarios) is hardly realized under a public blockchain. In this brief, we propose an IoT-applicable access control model under an original double-layer blockchain architecture, in which the mortgage/registration and control processes can be disaggregated. Depending on this architecture, the communication overhead for IoT devices is reduced and a rapid response is achieved. With linear secret sharing scheme, attribute-based access policies for resource objects are established to ensure fine-grained access control. We further implement a smart contract prototype on Ethereum and Fisco Bcos. Extensive experiments and numerical analysis demonstrate the feasibility of our proposed model.