Secure data sharing architecture for industrial Internet of things based on dual consortium chains

LI Xiaowei; ZHANG Weijiang; DUAN Wenyu; HE Yuan; YANG Dengqi; YANG Yiyu

doi:10.11959/j.issn.2096-109x.2025043

您当前的位置：

首页 >

文章列表页 >

Secure data sharing architecture for industrial Internet of things based on dual consortium chains

Topic: Cybersecurity for New Industrialization | 更新时间：2025-09-12

- Secure data sharing architecture for industrial Internet of things based on dual consortium chains
- Chinese Journal of Network and Information Security Vol. 11, Issue 4, Pages: 73-85(2025)
- 作者机构：
  
  大理大学数学与计算机学院，云南大理 671003
- 作者简介：
- 基金信息：
  
  The National Natural Science Foundation of China(62262001);Yunnan Xingdian Talents Support Program(XDYC-QNRC-2022-0137)
- DOI：10.11959/j.issn.2096-109x.2025043
  CLC： TP393
- Received：29 April 2025，
  
  Revised：2025-07-13，
  
  Published：25 August 2025
- 稿件说明：
移动端阅览
李晓伟, 张维江, 段文钰, 等. 基于双联盟链的工业物联网安全数据共享架构[J]. 网络与信息安全学报, 2025, 11(4): 73-85.

Format: LI X W, ZHANG W J, DUAN W Y, et al. Secure data sharing architecture for industrial Internet of things based on dual consortium chains[J]. Chinese Journal of Network and Information Security, 2025, 11(4): 73-85.
李晓伟, 张维江, 段文钰, 等. 基于双联盟链的工业物联网安全数据共享架构[J]. 网络与信息安全学报, 2025, 11(4): 73-85. DOI： 10.11959/j.issn.2096-109x.2025043.

Format: LI X W, ZHANG W J, DUAN W Y, et al. Secure data sharing architecture for industrial Internet of things based on dual consortium chains[J]. Chinese Journal of Network and Information Security, 2025, 11(4): 73-85. DOI： 10.11959/j.issn.2096-109x.2025043.

摘要

频繁的数据交互与共享是工业物联网的典型特点之一。密文策略的属性加密（ciphertext-policy attribute-based encryption

CP-ABE）为数据交互与共享提供了安全的保障。然而基于单链的CP-ABE算法未将数据和属性进行隔离，链式结构的持续延伸导致数据共享与属性撤销效率低。为解决上述问题，提出一种基于双联盟链的工业物联网数据共享架构。该架构中的双链由属性联盟链和数据联盟链组成，通过两条联盟链分别将属性权限和数据存储独立管理，解决单链CP-ABE方案中属性和数据未分离问题。在属性联盟链中提出属性单向哈希链，解决属性批量撤销困难的问题。同时，采用链上链下协同存储机制存储共享数据，缓解单一区块链的存储压力。最后基于FISCO BCOS平台实现了上述的双联盟链架构。

Abstract

Frequent data interaction and sharing were identified as typical characteristics of the Industrial Internet of Things (IIoT). Ciphertext-Policy Attribute-Based Encryption (CP-ABE) was recognized as providing a secure foundation for data interaction and sharing. However

traditional CP-ABE schemes based on a single blockchain were found to lack isolation between data and attributes

and the continuous expansion of the chain structure resulted in low efficiency in both data sharing and attribute revocation. To address these issues

a data sharing architecture for IIoT based on a dual consortium chain was proposed. In this architecture

the dual chain consisted of an attribute consortium chain and a data consortium chain

which independently managed attribute permissions and data storage

respectively

thereby resolving the inseparability of attributes and data inherent in single-chain CP-ABE schemes. Within the attribute consortium chain

an attribute one-way hash chain was introduced to overcome the challenges associated with batch attribute revocation. Additionally

a collaborative on-chain and off-chain storage mechanism was adopted to store shared data

alleviating the storage burden on any single blockchain. Finally

the described dual consortium chain architecture was implemented using the FISCO BCOS platform.

关键词

Keywords

references

SISINNI E , SAIFULLAH A , HAN S , et al . Industrial Internet of things: challenges, opportunities, and directions [J ] . IEEE Transactions on Industrial Informatics , 2018 , 14 ( 11 ): 4724 - 4734 .

SINGH A , CHATTERJEE K . Cloud security issues and challenges: a survey [J ] . Journal of Network and Computer Applications , 2017 , 79 : 88 - 115 .

屠袁飞 , 苏清健 , 杨庚 . 一种适用于工业控制系统的加密传输方案 [J ] . 电子与信息学报 , 2020 , 42 ( 2 ): 348 - 354 .

TU Y F , SU Q J , YANG G . An encryption transmission scheme applicable to industrial control systems [J ] . Journal of Electronics and Information Technology , 2020 , 42 ( 2 ): 348 - 354 .

牛淑芬 , 杨平平 , 谢亚亚 , 等 . 区块链上基于云辅助的密文策略属性基数据共享加密方案 [J ] . 电子与信息学报 , 2021 , 43 ( 7 ): 1864 - 1871 .

NIU S F , YANG P P , XIE Y Y , et al . A cloud-assisted ciphertext-based attribute-based data sharing encryption scheme on blockchain [J ] . Journal of Electronics and Information Technology , 2021 , 43 ( 7 ): 1864 - 1871 .

SINGAMANENI K K , YADAV K , ALEDAILY A N , et al . Decoding the future: exploring and comparing ABE standards for cloud, IoT, blockchain security applications [J ] . Multimedia Tools and Applications , 2025 , 84 ( 13 ): 12299 - 12327 .

刘敖迪 , 杜学绘 , 王娜 , 等 . 区块链系统安全防护技术研究进展 [J ] . 计算机学报 , 2024 , 47 ( 3 ): 608 - 646 .

LIU A D , DU X H , WANG N , et al . Research progress on blockchain system security technology [J ] . Chinese Journal of Computers , 2024 , 47 ( 3 ): 608 - 646 .

邱云翔 , 张红霞 , 曹琪 , 等 . 基于CP-ABE算法的区块链数据访问控制方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 3 ): 88 - 98 .

QIU Y X , ZHANG H X , CAO Q , et al . Blockchain data access control scheme based on CP-ABE algorithm [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 3 ): 88 - 98 .

乔康 , 游伟 , 王领伟 , 等 . 基于区块链的5G物联网数据共享方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 4 ): 45 - 55 .

QIAO K , YOU W , WANG L W , et al . Data sharing scheme for 5G IoT based on blockchain [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 4 ): 45 - 55 .

金琳 , 田有亮 . 基于区块链的多19权限属性隐藏电子病历共享方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 4 ): 66 - 76 .

JIN L , TIAN Y L . Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 4 ): 66 - 76 .

刘尚 , 郭银章 . 云计算多授权中心CP-ABE代理重加密方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 3 ): 176 - 188 .

LIU S , GUO Y Z . Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 3 ): 176 - 188 .

HOHENBERGER S , WATERS B . Attribute-based encryption with fast decryption [M ] // Public-Key Cryptography-PKC 2013 . Heidelberg : Springer , 2013 : 162 - 179 .

ZHANG Z T , ZENG P , PAN B F , et al . Large-universe attribute-based encryption with public traceability for cloud storage [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 10 ): 10314 - 10323 .

郑丽娟 , 刘佳琪 , 陶亚男 , 等 . 基于区块链的医疗信息属性加密访问控制方案 [J ] . 信息安全学报 , 2023 , 8 ( 1 ): 93 - 107 .

ZHENG L J , LIU J Q , TAO Y N , et al . Medical information attribute encryption access control scheme based on blockchain [J ] . Journal of Cyber Security , 2023 , 8 ( 1 ): 93 - 107 .

左娇 , 张龙 , 张可佳 . 基于区块链和CP-ABE的跨域认证方案 [J ] . 计算机工程与设计 , 2025 , 46 ( 4 ): 1056 - 1063 .

ZUO J , ZHANG L , ZHANG K J . Cross-domain authentication scheme based on blockchain and CP-ABE (ciphertext policy attribute based encryption) [J ] . Computer Engineering and Design , 2025 , 46 ( 4 ): 1056 - 1063 .

TIAN H L , LI M R . A lightweight IoT data security sharing scheme based on attribute-based encryption and blockchain [J ] . Computers , Materials & Continua, 2025 , 83 ( 3 ): 5539 - 5559 .

刘炜 , 李阳 , 田钊 , 等 . IDDS: 一种双链结构传染病数据共享区块链模型 [J ] . 计算机应用研究 , 2021 , 38 ( 3 ): 675 - 679 .

LIU W , LI Y , TIAN Z , et al . IDDS: double-chain structure infectious disease data sharing blockchain model [J ] . Application Research of Computers , 2021 , 38 ( 3 ): 675 - 679 .

LAMANNA M , PERAZZO P , DINI G . SEA-BREW: a scalable attribute-based encryption revocable scheme for low-bitrate IoT wireless networks [J ] . Journal of Information Security and Applications , 2021 , 58 : 102692 .

MOSTEIRO-SANCHEZ A , BARCELO M , ASTORGA J , et al . Securing IIoT using defence-in-depth: towards an end-to-end secure industry 4.0 [J ] . Journal of Manufacturing Systems , 2020 , 57 : 367 - 378 .

郭瑞 , 魏鑫 , 陈丽 . 工业物联网环境下可外包的策略隐藏属性基加密方案 [J ] . 信息网络安全 , 2023 , 23 ( 3 ): 1 - 12 .

GUO R , WEI X , CHEN L . An outsourceable and policy-hidden attribute-based encryption scheme in the IIoT system [J ] . Netinfo Security , 2023 , 23 ( 3 ): 1 - 12 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Hierarchical multi-device authentication and key agreement protocol for industrial IoT

Proof of storage with corruption identification and recovery for dynamic group users

Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain

Multi-party efficient audit mechanism for data integrity based on blockchain

Data sharing scheme for 5G IoT based on blockchain

Related Author

SU Chunhua

LIU Chunyan

FENG Tao

WU Yi

Jianfeng MA

Liangmin WANG

Hang XU

Tao JIANG

Related Institution

School of Computer and Communication, Lanzhou University of Technology

School of Economics and Management, Lanzhou University of Technology

Division of Computer Science, University of Aizu

State Key Laboratory of Integrated Service Networks, Xidian University

School of Cyber Engineering, Xidian University

⁰