首页> 外文会议>IFIP/IEEE International Symposium on Integrated Network Management >Access Control in Adversarial Environments for IoT-oriented Distributed Ledgers
【24h】

Access Control in Adversarial Environments for IoT-oriented Distributed Ledgers

机译:针对IOT导向分布式分区的对抗环境中的访问控制

获取原文

摘要

The surge of Internet of Things (IoT) applications requires distributed systems capable of securely exchanging messages and immutably recording data. While traditional blockchain architectures were not designed with IoT in mind, more recent Distributed Ledger Technologies (DLTs), which are not based on proof of work, can be considered as a solution to deal with the above requirements. However, without proof of work, these ledgers require an explicit way to manage the rate at which messages are issued and disseminated. In this work, we present an access control scheme for IoT-oriented DLTs, that is the mechanism used to choose which messages can be written to the ledger. Our approach aims to efficiently exploit the available network resources (bandwidth, processing power) and to guarantee fair access depending on node reputation. While these concepts have already been touched by well-known areas of networking research, such as TCP and quality of service, in DLT networks this problem is harder since nodes cannot trust familiar feedback measurements, such as packet acknowledgements or congestion notifications. In this paper, we design a completely decentralised mechanism which involves a round robin-based scheduler and a TCP-inspired rate setter. Extensive simulations show that our approach provides fair access, guarantees that all honest nodes eventually receive the same messages, and makes sure that malicious nodes cannot degrade performance or affect security.
机译:东西的互联网(物联网)应用需要分布式系统,能够安全地交换消息和不可应力的记录数据。虽然传统的区块Clinchain架构没有设计IOT,但最近的分布式分类账技术(DLT)不是基于工作证明的,可以视为处理上述要求的解决方案。但是,在没有工作证明的情况下,这些分类员需要明确的方法来管理发出和传播消息的速率。在这项工作中,我们为IOT导向的DLT提供了一个访问控制方案,即用于选择可以将哪些消息写入分类帐的机制。我们的方法旨在有效利用可用的网络资源(带宽,处理能力),并根据节点声誉保证公平访问。虽然这些概念已经被众所周知的网络研究领域触及,例如TCP和服务质量,但在DLT网络中,此问题难以达到节点不能信任熟悉的反馈测量,例如数据包确认或拥塞通知。在本文中,我们设计了一种完全分散的机制,涉及基于Robin的调度器和TCP启动速率设定器。广泛的模拟表明,我们的方法提供了公平的访问权限,保证所有诚实的节点最终会收到相同的消息,并确保恶意节点无法降低性能或影响安全性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号