基于区块链的可撤销边缘物联网数据共享方案

白诗童; 张嘉伟

doi:10.11959/j.issn.1000-436x.TXXB260474

Chinese

您当前的位置：

首页 >

文章列表页 >

基于区块链的可撤销边缘物联网数据共享方案

更新时间：2026-09-04

- 基于区块链的可撤销边缘物联网数据共享方案
- Enabling revocable data secure sharing based on blockchain for edge-based IoT
- 通信学报 2026年
- 作者机构：
  
  1.复旦大学，上海 200433
  2.西安电子科技大学网络与信息安全学院，陕西西安 710071
- 作者简介：
- 基金信息：
  
  国家自然科学基金资助项目(62171356)
- DOI：10.11959/j.issn.1000-436x.TXXB260474
  中图分类号： TN309
- 收稿：2026-08-12，
  
  修回：2026-08-28，
  
  录用：2026-09-01，
- 稿件说明：
移动端阅览
白诗童, 张嘉伟. 基于区块链的可撤销边缘物联网数据共享方案[J/OL]. 通信学报, 2026.

BAI Shitong, ZHANG Jiawei. Enabling revocable data secure sharing based on blockchain for edge-based IoT[J/OL]. Journal on Communications, 2026.
白诗童, 张嘉伟. 基于区块链的可撤销边缘物联网数据共享方案[J/OL]. 通信学报, 2026. DOI： 10.11959/j.issn.1000-436x.TXXB260474.

BAI Shitong, ZHANG Jiawei. Enabling revocable data secure sharing based on blockchain for edge-based IoT[J/OL]. Journal on Communications, 2026. DOI： 10.11959/j.issn.1000-436x.TXXB260474.

摘要

边缘物联网通过分布式结构部署在用户附近实现低延迟的数据共享。然而，数据所有权与控制权的分离导致共享数据面临严重的非法访问和信任问题。密文策略属性基加密（CP-ABE）技术能够提供数据机密性和细粒度访问控制，但难以适用于分布式边缘环境，且容易受到动态用户身份和属性伪造攻击，同时也给设备带来沉重负担。此外，现有大多数方案在时间敏感数据共享和隐私保护方面仍存在不足。同时，现有方案并未考虑边缘服务器可能破坏数据完整性的问题。本文提出了一种基于区块链的可撤销且可信的数据共享方案BRTDS。该方案将区块链和零知识证明引入可撤销的CP-ABE原语，面向动态用户实现可信的分布式数据访问控制，以抵御身份和属性伪造攻击。设计了一种时间释放隐藏策略树支持对时间敏感数据的访问控制和属性隐私保护。此外，利用智能合约构建了分布式数据审计机制，实现去中心化的共享数据完整性审计。同时还实现了高效加密与可验证解密以提升整体计算效率。形式化分析和大量仿真实验结果证明了本文方案的安全性、实用性和高效性。

Abstract

Edge-based Internet of Things (IoT) emerges to facilitate low-latency data sharing in a decentralized way. However

the intrinsic separation of data ownership and control inflicts serious illegal access and loss of trust on the data sharing. Although Ciphertext Policy Attribute-Based Encryption (CP-ABE) enables confidentiality and fine-grained access control

it is susceptible to impersonation attack from distributed and dynamic users

and its high overhead brings heavy burden to devices

which poses a huge challenge to its application in IoT data sharing. Moreover

most of existing schemes are insufficient to exert privacy-preserving access control on time-sensitive data. Furthermore

semi-trusted edge servers may compromise data integrity

which is seldomly considered. In this work

a Blockchain-assisted Revocable and Trustworthy Data Sharing (BRTDS) scheme is proposed for time sensitive data. It combines blockchain and zero knowledge proof with revocable CP-ABE to ensure distributed data access control across dynamic users and resist malicious users with impersonated identities and attributes. By designing a time-sensitive and privacy-preserving access policy tree

privacy-preserving access control is achieved. Furthermore

a distributed data auditing mechanism is devised through smart contracts to guarantee data integrity in access control process without a centralized auditor. Efficient encryption and verifiable data decryption is achieved with a better performance. Finally

the security of our proposal and its practicability and efficiency is demonstrated through extensive performance evaluation with simulations.

关键词

Keywords

references

SALMAN M , SAEED N , KHURSHID K . Transformers for Internet of things security and communications: A comprehensive survey [J ] . IEEE Internet of Things Journal , 2026 , 1 - 1 .

NASIRAEE H , LIU X . A robust multifactor authentication and key agreement protocol in industrial Internet of things [J ] . IEEE Internet of Things Journal , 2026 , 1 - 1 .

ZUO Y , YUE M , YANG H , et al . Integrating communication, sensing and computing in satellite Internet of things: Challenges and opportunities [J ] . IEEE Wireless Communications , 2024 , 31 ( 3 ): 332 - 338 .

RAHMAN M A , JAMIL S U , HOSSAIN M S , et al . An LLM-enabled multimodal agentic AI framework for the medical Internet of things (MIoT) [J ] . ACM Transactions on Multimedia Computing, Communications and Applications , 2026 , 22 ( 8 ): 1 - 35 .

SIDDIQI S J , ALOBAIDI A H , JAN M A , et al . Securing vehicle-to-digital twin communications in the Internet of vehicles [J ] . ACM Transactions on Multimedia Computing, Communications and Applications , 2026 , 22 ( 1 ): 1 - 19 .

CHAUDHRY S A , IRSHAD A , AKHTAR Z , et al . Sebac-iod: A secure and efficient batch access control technique for Internet of drones [J ] . IEEE Transactions on Vehicular Technology , 2026 , 1 - 1 .

刘媛妮 , 殷涌泉 , 张建辉 , 等 . 基于区块链的物联网无证书多重身份认证方案 [J ] . 计算机学报 , 2026 , 49 ( 7 ): 1670 - 1686 . DOI: 10.11897/SP.J.1016.2026.01670 http://dx.doi.org/10.11897/SP.J.1016.2026.01670 .

LIU Y N , YIN Y Q , ZHANG J H et al . A blockchain-based certificateless multi-identity authentication scheme for IoT [J ] . CHINESE JOURNAL OF COMPUTERS , 2026 , 49 ( 7 ): 1670 - 1686 .

BOUAFIA K , SLIMANI H , NACER H , et al . Big data analytics and Internet of things combined with artificial intelligence techniques for effective emergency management: A Comprehensive survey [J ] . ACM Computing Surveys , 2026 , 58 ( 12 ): 1 - 43 .

TAYLOR P . Number of Internet of Things (IoT) connections worldwide from 2022 to 2023, with forecasts from 2024 to 2034 [J ] . statista. Accessed: Dec , 2025 , 1 - 1 .

YANG Y , ZHAO J , CHEN F , et al . Accurate and efficient privacy-preserving TPE-image retrieval in cloud-assisted Internet of things [J ] . IEEE Internet of Things Journal , 2026 , 1 - 1 .

SHARMA M , TOMAR A , HAZRA A . Edge computing for industry 5.0: Fundamental, applications, and research challenges [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 11 ): 19070 - 19093 .

WANG F , CUI J , ZHANG Q , et al . Blockchain-based secure cross-domain data sharing for edge-assisted industrial Internet of things [J ] . IEEE Transactions on Information Forensics and Security , 2024 , 19 : 3892 - 3905 .

REGAN R , JOSPHINELEELA R , KHAMRUDDIN M , et al . Balancing data privacy and sharing in IIoT: Introducing the GFL-LFF aggregation algorithm [J ] . Computer Networks , 2024 , 247 : 110401 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // Proceedings of the 13th ACM conference on Computer and communications security . Virginia : ACM , 2006 : 89 - 98 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // 2007 IEEE symposium on security and privacy (SP’07) . Berkeley : IEEE Press , 2007 : 321 - 334 .

SAHAI A , WATERS B . Fuzzy identity-based encryption [C ] // Proceedings of the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques . Berlin : Springer , 2005 : 457 - 473 .

HUR J . Attribute-based secure data sharing with hidden policies in smart grid [J ] . IEEE Transactions on Parallel and Distributed Systems , 2013 , 24 ( 11 ): 2171 - 2180 .

ZHANG L , MA Y , WU Z , et al . LMDA: Lightweight multi-authority CP-ABE scheme based on dynamic attributes for system wide information management [J ] . IEEE Internet of Things Journal , 2026 .

ANDROULAKI E , SORIENTE C , MALISA L , et al . Enforcing location and time-based access control on cloud-stored data [C ] // 2014 IEEE 34th International Conference on Distributed Computing Systems . Madrid : IEEE Press , 2014 : 637 - 648 .

余增文 , 张嘉伟 , 姜奇 , 等 . 数据空间中可比较属性的数据访问控制方案 [J ] . 计算机研究与发展 , 2026 , 63 ( 3 ): 735 - 751 . DOI: 10.7544/issn1000-1239.202550411 http://dx.doi.org/10.7544/issn1000-1239.202550411 .

YU Z W , ZHANG J W , JIANG Q , et al . Data access control scheme with comparable attribute for dataspace [J ] . Journal of Computer Research and Development , 2026 , 63 ( 3 ): 735 - 751 .

HONG J , XUE K , XUE Y , et al . TAFC: Time and attribute factors combined access control for time-sensitive data in public cloud [J ] . IEEE Transactions on Services Computing , 2017 , 13 ( 1 ): 158 - 171 .

HAN D , PAN N , LI K C . A traceable and revocable ciphertext-policy attribute-based encryption scheme based on privacy protection [J ] . IEEE Transactions on Dependable and Secure Computing , 2020 , 19 ( 1 ): 316 - 327 .

CHEN L , XU S , ZHANG H , et al . Fair and exculpable attribute-based searchable encryption with revocation and verifiable outsourced decryption using smart contract [J ] . IEEE Internet of Things Journal , 2024 , 1 – 1 .

WANG F , CUI J , ZHANG Q , et al . Blockchain-based lightweight message authentication for edge-assisted cross-domain industrial Internet of things [J ] . IEEE transactions on dependable and secure computing , 2023 , 21 ( 4 ): 1587 - 1604 .

ZHANG J , WANG B , WANG X A , et al . New group user based privacy preserving cloud auditing protocol [J ] . Future Generation Computer Systems , 2020 , 106 : 585 - 594 .

DING R , ZHONG H , MA J , et al . Lightweight privacy-preserving identity-based verifiable IoT-based health storage system [J ] . IEEE Internet of Things Journal , 2019 , 6 ( 5 ): 8393 - 8405 .

SHEN W , QIN J , YU J , et al . Cite auditing and data sharing with sensitive information hiding for secure cloud storage [J ] . IEEE Transactions on Information Forensics and Security , 2018 , 14 ( 2 ): 331 - 346 .

DU Y , DUAN H , ZHOU A , et al . Enabling secure and efficient decentralized storage auditing with blockchain [J ] . IEEE Transactions on Dependable and Secure Computing , 2021 , 19 ( 5 ): 3038 - 3054 .

DE C A , IOVINO V . jpbc: Java pairing based cryptography [C ] // Proceedings of the 16th IEEE Symposium on Computers and Communications (ISCC) . Kerkyra : IEEE Press , 2011 , 850 – 855 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向区块链无线接入网络的建模与分析

基于以太坊字节码的隐蔽通信方法

面向6G的内生智能频谱管控关键技术研究

UANET中基于任务感知的区块链共识与存储协同优化研究

云辅助工业物联网中基于区块链的用户友好型数据检索和共享方案