基于比特币区块链的公共无线局域网接入控制隐私保护研究

牛玉坤; 魏凌波; 张驰; 张霞; GustavoVejarano

doi:10.11959/j.issn.2096-109x.2020022

您当前的位置：

首页 >

文章列表页 >

基于比特币区块链的公共无线局域网接入控制隐私保护研究

专栏：区块链技术 | 更新时间：2024-06-03

- 基于比特币区块链的公共无线局域网接入控制隐私保护研究
- Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain
- 网络与信息安全学报 2020年6卷第2期页码：56-66
- 作者机构：
  
  1. 中国科学技术大学信息科学技术学院，安徽合肥 230026
  2. 武汉理工大学计算机科学与技术学院，湖北武汉 430047
  3. Department of Electrical Engineering and Computer Science,Loyola Marymount University,Los Angeles,CA 90045
- 作者简介：
  
  [ "牛玉坤（1989- ），男，河南周口人，中国科学技术大学博士生，主要研究方向为应用密码学和区块链技术" ]
  [ "魏凌波（1979- ），女，陕西周至人，博士，中国科学技术大学副研究员，主要研究方向为应用密码学和区块链技术" ]
  [ "张驰（1977- ），男，广西百色人，博士，中国科学技术大学副教授，主要研究方向为无线网络、网络安全和区块链技术" ]
  [ "张霞（1979- ），女，湖北武汉人，博士，武汉理工大学讲师，主要研究方向为无线网络和区块链技术" ]
  [ "Gustavo Vejarano（1982- ），男，哥伦比亚人，博士，洛约拉马利蒙特大学副教授，主要研究方向为无线网络和安全技术" ]
- 基金信息：
  
  国家自然科学基金资助项目;The Natural Science Foundation of China(61702474);国家重点研发计划基金资助项目;The National Key R＆D Program of China(2018YFB0804201)
- DOI：10.11959/j.issn.2096-109x.2020022
  中图分类号： TP302
- 网络首发：2020-04，
  
  纸质出版：2020-04-15
- 稿件说明：
移动端阅览
牛玉坤, 魏凌波, 张驰, 等. 基于比特币区块链的公共无线局域网接入控制隐私保护研究[J]. 网络与信息安全学报, 2020,6(2):56-66.

Yukun NIU, Lingbo WEI, Chi ZHANG, et al. Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 56-66.
牛玉坤, 魏凌波, 张驰, 等. 基于比特币区块链的公共无线局域网接入控制隐私保护研究[J]. 网络与信息安全学报, 2020,6(2):56-66. DOI： 10.11959/j.issn.2096-109x.2020022.

Yukun NIU, Lingbo WEI, Chi ZHANG, et al. Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 56-66. DOI： 10.11959/j.issn.2096-109x.2020022.

摘要

在公共无线局域网的访问控制中，用户隐私保护和用户可问责性是一对相互冲突的目标。针对该问题，提出了一种基于比特币区块链和Intel SGX的匿名且可问责用户管理与访问控制方案。在不修改已有的比特币协议的前提下，实现了对公共无线局域网访问凭证的安全管理，而无须依赖可信第三方；采用基于Intel SGX的混合技术，通过较小的开销提供了用户可控的访问凭证匿名性保护；设计的区块链验证路径规则在保持用户隐私的同时实现了对恶意用户的问责。理论分析和实验结果验证了该方案的安全性和可行性。

Abstract

In designing an access control scheme for public wireless LAN (WLAN)

user privacy protection and user accountability are two conflict goals.A novel user management and access control scheme was proposed to solve this problem by utilizing the bitcoin blockchain and Intel SGX.It utilized unmodified bitcoin blockchain to manage the ownership of access credentials for users without relying on any trusted third party.It adopted Intel SGX-based mixing technology to enhance anonymity of users’ access credentials.It designed verification path rule to resolve the conflicts between the privacy-preserving and accountability objectives.The effectiveness and feasibility of the proposed scheme are also demonstrated by security analysis and performance evaluation.

关键词

Keywords

references

PISA C , CAPONI A , DARGAHI T , et al . WI-FAB:attribute-based WLAN access control,without pre-shared keys and backend infra-structures [C ] // Proceedings of the 8th ACM International Work shop on Hot Topics in Planet-Scale Mobile Computing and Online Social Networking . 2016 : 31 - 36 .

CASSOLA A , BLASS E O , NOUBIR G . Authenticating privately over public Wi-Fi hotspots [C ] // Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security . 2015 : 1346 - 1357 .

LOU W , REN K . Security,privacy,and accountability in wireless access networks [J ] . IEEE Wireless Communications , 2009 , 16 ( 4 ): 80 - 87 .

TSANG P P , AU M H , KAPADIA A , et al . Blacklistable anonymous credentials:blocking misbehaving users without TTPS [C ] // Proceedings of the 14th ACM Conference on Computer and Communications Security . 2007 : 72 - 81 .

TSANG P P , AU M H , KAPADIA A , et al . PEREA:Towards practical TTP-free revocation in anonymous authentication [C ] // Proceedings of the 15th ACM Conference on Computer and Communications Security . 2008 : 333 - 344 .

NIU Y , WEI L , ZHANG C , et al . An anonymous and accountable authentication scheme for Wi-Fi hotspot access with the bitcoin blockchain [C ] // 2017 IEEE/CIC International Conference on Communications in China (ICCC) . 2017 : 1 - 6 .

RUFFING T , MORENO-SANCHEZ P , KATE A . CoinShuffle:practical decentralized coin mixing for bitcoin [C ] // European Symposium on Research in Computer Security . 2014 : 345 - 364 .

MARTIN J , MAYBERRY T , DONAHUE C , et al . A study of MAC address randomization in mobile devices and when it fails [J ] . Proceedings on Privacy Enhancing Technologies , 2017 , 2017 ( 4 ): 365 - 383 .

DINGLEDINE R , MATHEWSON N , SYVERSON P . Tor:the second-generation onion router [R ] . Naval Research Lab Washington DC , 2004 .

BRASSER F , MÜLLER U , DMITRIENKO A ， et al . Software grand exposure:SGX cache attacks are practical [C ] // 11th USENIX Workshop on Offensive Technologies (WOOT 17) . 2017 .

HÄHNEL M , CUI W , PEINADO M . High-resolution side channels for untrusted operating systems [C ] // 2017 USENIX Annual Technical Conference (USENIX ATC 17) . 2017 : 299 - 312 .

GÖTZFRIED J , ECKERT M , SCHINZEL S , et al . Cache attacks on Intel SGX [C ] // Proceedings of the 10th European Workshop on Systems Security . 2017 :2.

MOGHIMI A , IRAZOQUI G , EISENBARTH T . Cachezoom:how SGX amplifies the power of cache attacks [C ] // International Conference on Cryptographic Hardware and Embedded Systems . 2017 : 69 - 90 .

SCHWARZ M , WEISER S , GRUSS D , et al . Malware guard extens sion:using SGX to conceal cache attacks [C ] // International Conference on Detection of Intrusions and Malware,and Vulnerability Assessment . 2017 : 3 - 24 .

WANG W , CHEN G , PAN X , et al . Leaky cauldron on the dark land:understanding memory side-channel hazards in SGX [C ] // Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security . 2017 : 2421 - 2434 .

STRACKX R , PIESSENS F . Ariadne:a minimal approach to state continuity [C ] // 25th USENIX Security Symposium (USENIX Security 16) . 2016 : 875 - 892 .

CHEN S , ZHANG X , REITER M K , et al . Detecting privileged side-channel attacks in shielded execution with Déjá Vu [C ] // Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security . 2017 : 7 - 18 .

COSTAN V , LEBEDEV I , DEVADAS S . Sanctum:minimal hardware extensions for strong software isolation [C ] // 25th USENIX Security Symposium (USENIX Security 16) . 2016 : 857 - 874 .

GRUSS D , LETTNER J , SCHUSTER F , et al . Strong and efficient cache side-channel protection using hardware transactional memory [C ] // 26th USENIX Security Symposium (USENIX Security 17) . 2017 : 217 - 233 .

SHIH M W , LEE S , KIM T , et al . T-SGX:eradicating controlled-channel attacks against enclave programs [C ] // NDSS . 2017 .

SHINDE S , CHUA Z L , NARAYANAN V , et al . Preventing page faults from telling your secrets [C ] // Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security . 2016 : 317 - 328 .

MISHRA P , PODDAR R , CHEN J , et al . Oblix:an efficient oblivious search index [C ] // 2018 IEEE Symposium on Security and Privacy (S＆P) . IEEE , 2018 : 279 - 296 .

Crypto++ [EB ] .

浏览量

387

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

可证明安全的SM2盲适配器签名方案

面向车联网的匿名组密钥分发方案

融合双层卫星网络的星地和星间AKA协议

数字货币交易匿名性与监管的博弈分析

基于区块链的轻量化移动自组网认证方案