Permission Token Segmentation Scheme Based on Blockchain Access Control
Jinshan Shi, Ru Li · 2020
The Internet of Things (IoT) is a large-scale complex network composed of a large number of heterogeneous devices, and due to the complexity of permission management in some scenarios of IoT, such as smart cities and smart healthcare, access control systems need to support strong flexibility. Permission delegation is an effective means to improve flexibility, but the delegated permission token in the current permission delegation scheme is a whole, and the recipient cannot re-delegate part of the permission in the received token. In this paper, a blockchain-based permission token segmentation scheme is proposed, which splits out part of the permissions in a permission token owned by the subject to generate a new token, so that the subject can control the fine-grained permissions in the token, enabling the subject to manage the permissions more flexibly. The permission combination scheme is then provided, and the permission invalidation problem in the token segmentation scheme is analyzed and discussed, and a token invalidation scheme is given. The security analysis shows that the scheme can reliably guarantee the security of authorized access.