BC-BLPM: A multi-level security access control model based on blockchain technology

摘要

Traditional multi-level security (MLS) systems have the defect of centralizing authorized facilities, which is difficult to meet the security requirements of modern distributed peer-to-peer network architecture. Blockchain is widely used in the field of access control with its decentralization, traceability and non-defective modification. Combining the blockchain technology and the Bell-LaPadula model, we propose a new access control model, named BC-BLPM, for MLS environment. The "multi-chain" blockchain architecture is used for dividing resources into isolated access domains, providing a fine-grained data protection mechanism. The access control policies are implemented by smart contracts deployed in each access domain, so that the side chains of different access domains storage access records from outside and maintain the integrity of the records. Finally, we implement the BC-BLPM prototype system using the Hyperledger Fabric. The experimental and analytical results show that the model can adapt well to the needs of multi-level security environment, and it has the feasibility of application in actual scenarios.