基于双联盟链的工业物联网安全数据共享架构

李晓伟; 张维江; 段文钰; 何远; 杨邓奇; 杨毅宇

doi:10.11959/j.issn.2096-109x.2025043

您当前的位置：

首页 >

文章列表页 >

基于双联盟链的工业物联网安全数据共享架构

专题：新型工业化网络安全 | 更新时间：2025-09-12

- 基于双联盟链的工业物联网安全数据共享架构
- Secure data sharing architecture for industrial Internet of things based on dual consortium chains
- 网络与信息安全学报 2025年11卷第4期页码：73-85
- 作者机构：
  
  大理大学数学与计算机学院，云南大理 671003
- 作者简介：
  
  [ "李晓伟（1985- ），男，吉林通化人，大理大学副教授，主要研究方向为密码协议、云计算安全以及区块链技术。" ]
  [ "张维江（2001- ），男，云南镇雄人，大理大学硕士生，主要研究方向为区块链技术、数据共享。" ]
  [ "段文钰（1998- ），男，河北秦皇岛人，大理大学硕士生，主要研究方向为区块链技术、数据共享。" ]
  [ "何远（1977- ），男，云南大理人，大理大学讲师，主要研究方向为信息安全、人工智能等。" ]
  [ "杨邓奇（1979- ），男，云南大理人，大理大学教授，主要研究方向信息安全、人工智能。" ]
  [ "杨毅宇（1987- ），男，云南大理人，大理大学讲师，主要研究方向为物联网安全、移动安全、密码学应用。" ]
- 基金信息：
  
  国家自然科学基金(62262001);云南省兴滇人才计划项目(XDYC-QNRC-2022-0137)
- DOI：10.11959/j.issn.2096-109x.2025043
  中图分类号： TP393
- 收稿：2025-04-29，
  
  修回：2025-07-13，
  
  纸质出版：2025-08-25
- 稿件说明：
移动端阅览
李晓伟, 张维江, 段文钰, 等. 基于双联盟链的工业物联网安全数据共享架构[J]. 网络与信息安全学报, 2025, 11(4): 73-85.

Format: LI X W, ZHANG W J, DUAN W Y, et al. Secure data sharing architecture for industrial Internet of things based on dual consortium chains[J]. Chinese Journal of Network and Information Security, 2025, 11(4): 73-85.
李晓伟, 张维江, 段文钰, 等. 基于双联盟链的工业物联网安全数据共享架构[J]. 网络与信息安全学报, 2025, 11(4): 73-85. DOI： 10.11959/j.issn.2096-109x.2025043.

Format: LI X W, ZHANG W J, DUAN W Y, et al. Secure data sharing architecture for industrial Internet of things based on dual consortium chains[J]. Chinese Journal of Network and Information Security, 2025, 11(4): 73-85. DOI： 10.11959/j.issn.2096-109x.2025043.

摘要

频繁的数据交互与共享是工业物联网的典型特点之一。密文策略的属性加密（ciphertext-policy attribute-based encryption

CP-ABE）为数据交互与共享提供了安全的保障。然而基于单链的CP-ABE算法未将数据和属性进行隔离，链式结构的持续延伸导致数据共享与属性撤销效率低。为解决上述问题，提出一种基于双联盟链的工业物联网数据共享架构。该架构中的双链由属性联盟链和数据联盟链组成，通过两条联盟链分别将属性权限和数据存储独立管理，解决单链CP-ABE方案中属性和数据未分离问题。在属性联盟链中提出属性单向哈希链，解决属性批量撤销困难的问题。同时，采用链上链下协同存储机制存储共享数据，缓解单一区块链的存储压力。最后基于FISCO BCOS平台实现了上述的双联盟链架构。

Abstract

Frequent data interaction and sharing were identified as typical characteristics of the Industrial Internet of Things (IIoT). Ciphertext-Policy Attribute-Based Encryption (CP-ABE) was recognized as providing a secure foundation for data interaction and sharing. However

traditional CP-ABE schemes based on a single blockchain were found to lack isolation between data and attributes

and the continuous expansion of the chain structure resulted in low efficiency in both data sharing and attribute revocation. To address these issues

a data sharing architecture for IIoT based on a dual consortium chain was proposed. In this architecture

the dual chain consisted of an attribute consortium chain and a data consortium chain

which independently managed attribute permissions and data storage

respectively

thereby resolving the inseparability of attributes and data inherent in single-chain CP-ABE schemes. Within the attribute consortium chain

an attribute one-way hash chain was introduced to overcome the challenges associated with batch attribute revocation. Additionally

a collaborative on-chain and off-chain storage mechanism was adopted to store shared data

alleviating the storage burden on any single blockchain. Finally

the described dual consortium chain architecture was implemented using the FISCO BCOS platform.

关键词

Keywords

references

SISINNI E , SAIFULLAH A , HAN S , et al . Industrial Internet of things: challenges, opportunities, and directions [J ] . IEEE Transactions on Industrial Informatics , 2018 , 14 ( 11 ): 4724 - 4734 .

SINGH A , CHATTERJEE K . Cloud security issues and challenges: a survey [J ] . Journal of Network and Computer Applications , 2017 , 79 : 88 - 115 .

屠袁飞 , 苏清健 , 杨庚 . 一种适用于工业控制系统的加密传输方案 [J ] . 电子与信息学报 , 2020 , 42 ( 2 ): 348 - 354 .

TU Y F , SU Q J , YANG G . An encryption transmission scheme applicable to industrial control systems [J ] . Journal of Electronics and Information Technology , 2020 , 42 ( 2 ): 348 - 354 .

牛淑芬 , 杨平平 , 谢亚亚 , 等 . 区块链上基于云辅助的密文策略属性基数据共享加密方案 [J ] . 电子与信息学报 , 2021 , 43 ( 7 ): 1864 - 1871 .

NIU S F , YANG P P , XIE Y Y , et al . A cloud-assisted ciphertext-based attribute-based data sharing encryption scheme on blockchain [J ] . Journal of Electronics and Information Technology , 2021 , 43 ( 7 ): 1864 - 1871 .

SINGAMANENI K K , YADAV K , ALEDAILY A N , et al . Decoding the future: exploring and comparing ABE standards for cloud, IoT, blockchain security applications [J ] . Multimedia Tools and Applications , 2025 , 84 ( 13 ): 12299 - 12327 .

刘敖迪 , 杜学绘 , 王娜 , 等 . 区块链系统安全防护技术研究进展 [J ] . 计算机学报 , 2024 , 47 ( 3 ): 608 - 646 .

LIU A D , DU X H , WANG N , et al . Research progress on blockchain system security technology [J ] . Chinese Journal of Computers , 2024 , 47 ( 3 ): 608 - 646 .

邱云翔 , 张红霞 , 曹琪 , 等 . 基于CP-ABE算法的区块链数据访问控制方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 3 ): 88 - 98 .

QIU Y X , ZHANG H X , CAO Q , et al . Blockchain data access control scheme based on CP-ABE algorithm [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 3 ): 88 - 98 .

乔康 , 游伟 , 王领伟 , 等 . 基于区块链的5G物联网数据共享方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 4 ): 45 - 55 .

QIAO K , YOU W , WANG L W , et al . Data sharing scheme for 5G IoT based on blockchain [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 4 ): 45 - 55 .

金琳 , 田有亮 . 基于区块链的多19权限属性隐藏电子病历共享方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 4 ): 66 - 76 .

JIN L , TIAN Y L . Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 4 ): 66 - 76 .

刘尚 , 郭银章 . 云计算多授权中心CP-ABE代理重加密方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 3 ): 176 - 188 .

LIU S , GUO Y Z . Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 3 ): 176 - 188 .

HOHENBERGER S , WATERS B . Attribute-based encryption with fast decryption [M ] // Public-Key Cryptography-PKC 2013 . Heidelberg : Springer , 2013 : 162 - 179 .

ZHANG Z T , ZENG P , PAN B F , et al . Large-universe attribute-based encryption with public traceability for cloud storage [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 10 ): 10314 - 10323 .

郑丽娟 , 刘佳琪 , 陶亚男 , 等 . 基于区块链的医疗信息属性加密访问控制方案 [J ] . 信息安全学报 , 2023 , 8 ( 1 ): 93 - 107 .

ZHENG L J , LIU J Q , TAO Y N , et al . Medical information attribute encryption access control scheme based on blockchain [J ] . Journal of Cyber Security , 2023 , 8 ( 1 ): 93 - 107 .

左娇 , 张龙 , 张可佳 . 基于区块链和CP-ABE的跨域认证方案 [J ] . 计算机工程与设计 , 2025 , 46 ( 4 ): 1056 - 1063 .

ZUO J , ZHANG L , ZHANG K J . Cross-domain authentication scheme based on blockchain and CP-ABE (ciphertext policy attribute based encryption) [J ] . Computer Engineering and Design , 2025 , 46 ( 4 ): 1056 - 1063 .

TIAN H L , LI M R . A lightweight IoT data security sharing scheme based on attribute-based encryption and blockchain [J ] . Computers , Materials & Continua, 2025 , 83 ( 3 ): 5539 - 5559 .

刘炜 , 李阳 , 田钊 , 等 . IDDS: 一种双链结构传染病数据共享区块链模型 [J ] . 计算机应用研究 , 2021 , 38 ( 3 ): 675 - 679 .

LIU W , LI Y , TIAN Z , et al . IDDS: double-chain structure infectious disease data sharing blockchain model [J ] . Application Research of Computers , 2021 , 38 ( 3 ): 675 - 679 .

LAMANNA M , PERAZZO P , DINI G . SEA-BREW: a scalable attribute-based encryption revocable scheme for low-bitrate IoT wireless networks [J ] . Journal of Information Security and Applications , 2021 , 58 : 102692 .

MOSTEIRO-SANCHEZ A , BARCELO M , ASTORGA J , et al . Securing IIoT using defence-in-depth: towards an end-to-end secure industry 4.0 [J ] . Journal of Manufacturing Systems , 2020 , 57 : 367 - 378 .

郭瑞 , 魏鑫 , 陈丽 . 工业物联网环境下可外包的策略隐藏属性基加密方案 [J ] . 信息网络安全 , 2023 , 23 ( 3 ): 1 - 12 .

GUO R , WEI X , CHEN L . An outsourceable and policy-hidden attribute-based encryption scheme in the IIoT system [J ] . Netinfo Security , 2023 , 23 ( 3 ): 1 - 12 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于工业物联网的分层多设备认证密钥协商协议

支持受损数据定位与恢复的动态群用户可证明存储

基于区块链的多权限属性隐藏电子病历共享方案

基于区块链的数据完整性多方高效审计机制

基于区块链的5G物联网数据共享方案