融合区块链智能合约的日志安全保护模型

doi:10.3778/j.issn.1002-8331.2210-0243

摘要/Abstract

摘要： 区块链技术因其不可篡改和可追溯性等特点，在数据完整性保护方面具有很大优势。在数据量较大的日志数据保护场景中，数据的真实性、完整性、机密性都有很高要求，而现有方法并不能兼顾。因此，设计了一种基于区块链智能合约的日志安全保护模型，提出日志数据微观保护环境（micro log data protect environment，MiLDPE）和日志数据宏观保护环境（macro log data protect environment，MaLDPE）的概念。MiLDPE是用硬件SGX技术实现可信计算的区块链节点，其确保日志数据仅能在产生它的节点上审计。MaLDPE是一个多MiLDPE节点组成的去中心化区块链集群，由一组智能合约实现日志数据访问控制，并通过随机节点选择算法保障日志数据的完整性和机密性。通过大量实验研究，证实该模型性能达到了预期要求。

关键词: 日志数据保护, 区块链, 智能合约, SGX, 可信计算

Abstract: Blockchain is a promising technology for data integrity protection due to its non-tampering and traceability. Current works cannot well balance the authenticity, integrity and confidentiality for the large-scale log data protection. To address this issue, a log data security protection model based on smart contract, including micro log data protect environment（MiLDPE） and macro log data protect environment（MaLDPE）, is proposed. MiLDPE is the blockchain node associated with the hardware level trusted computing SGX technology to guarantee that the log data can only be audited on the node that generated it. MaLDPE is a cluster of MiLDPE nodes where the log data access is controlled by a group of smart contracts and the log data integrity and confidentiality is ensured by a random node selection algorithm. Finally, the performance of proposed model is demonstrated and verified through numerical experiments.

Key words: log data protection, blockchain, smart contract, SGX, trust computing

刘逸帆, 万剑雄, 高昊昱, 杨艳艳. 融合区块链智能合约的日志安全保护模型[J]. 计算机工程与应用, 2023, 59(12): 242-257.

LIU Yifan, WAN Jianxiong, GAO Haoyu, YANG Yanyan. Log Security Protection Model Incorporating Blockchain Smart Contracts[J]. Computer Engineering and Applications, 2023, 59(12): 242-257.

参考文献

[1] 左黎明，陈祚松，夏萍萍，等.一种改进的高效无证书短签名方案[J].计算机科学，2019，46（4）：172-176.
ZUO L M，CHEN Z S，XIA P P，et al.Improved efficient certificateless short signature scheme[J].Computer Science，2019，46（4）：172-176.
[2] 童伟，朱岩.可证明安全的可擦除脆弱数字水印[J].计算机工程与设计，2018，39（3）：679-683.
TONG W，ZHU Y.Provably secure erasable fragile watermarking[J].Computer Engineering and Design，2018，39（3）：679-683.
[3] 王守相，陈海文，赵倩宇，等.基于数字水印和非对称加密的智能电网用户敏感信息保护方案[J].中南大学学报（英文版），2022，29（2）：726-740.
WANG S X，CHEN H W，ZHAO Q Y，et al.Preserving scheme for user’s confidential information in smart grid based on digital watermark and asymmetric encryption[J].Journal of Central South University，2022，29（2）：726-740.
[4] XUE J，XU C，ZHAO J，et al.Identity-based public auditing for cloud storage systems against malicious auditors via blockchain[J].Science China Information Sciences，2019，62（3）：1-16.
[5] 安瑞，何德彪，张韵茹，等.基于区块链技术的防伪系统的设计与实现[J].密码学报，2017，4（2）：199-208.
AN R，HE D B，ZHANG Y R，et al.The design of an anti-counterfeiting system based on blockchain[J].Journal of Cryptologic Research，2017，4（2）：199-208.
[6] YANG C，CHEN X，XIANG Y.Blockchain-based publicly verifiable data deletion scheme for cloud storage[J].Journal of Network and Computer Applications，2018，103：185-193.
[7] SHAFAGH H，BURKHALTER L，HITHNAWI A，et al.Towards blockchain-based auditable storage and sharing of IoT data[C]//Proceedings of the 2017 on Cloud Computing Security Workshop，2017：45-50.
[8] 谭海波，周桐，赵赫，等.基于区块链的档案数据保护与共享方法[J].软件学报，2019，30（9）：2620-2635.
TAN H B，ZHOU T，ZHAO H，et al.Archives data protection and sharing method based on blockchain[J].Journal of Software，2019，30（9）：2620-2635.
[9] RENNER T，MVLLER J，KAO O.Endolith：a blockchain-based framework to enhance data retention in cloud storages[C]//26th Euromicro International Conference on Parallel，Distributed and Network-Based Processing（PDP），2018：627-634.
[10] LIANG X，SHETTY S，TOSH D，et al.Provchain：a blockchain-based data provenance architecture in cloud environment with enhanced privacy and availability[C]//17th IEEE/ACM International Symposium on Cluster，Cloud and Grid Computing（CCGRID），2017：468-477.
[11] CHOWDHURY M J M，COLMAN A，KABIR M A，et al.Blockchain as a notarization service for data sharing with personal data store[C]//17th IEEE International Conference on Trust，Security and Privacy in Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering（TrustCom/BigDataSE），2018：1330-1335.
[12] LIU M，SHANG J，LIU P，et al.VideoChain：trusted video surveillance based on blockchain for campus[C]//International Conference on Cloud Computing and security.Cham：Springer，2018：48-58.
[13] LIANG J，HAN W，GUO Z，et al.DESC：enabling secure data exchange based on smart contracts[J].Science China（Information Science），2018，61（4）：262-264.
[14] ZHENG B K，ZHU L H，SHEN M，et al.Scalable and privacy-preserving data sharing based on blockchain[J].Journal of Computer Science and Technology，2018，33（3）：557-567.
[15] 田海博，何杰杰，付利青.基于公开区块链的隐私保护公平合同签署协议[J].密码学报，2017，4（2）：187-198.
TIAN H B，HE J J，FU L Q.A privacy preserving fair contract signing protocol based on block chains[J].Journal of Cryptologic Research，2017，4（2）：187-198.
[16] 董祥千，郭兵，沈艳，等.一种高效安全的去中心化数据共享模型[J].计算机学报，2018，41（5）：1021-1036.
DONG X Q，GUO B，SHEN Y，et al.An efficient and secure decentralizing data sharing model[J].Chinese Journal of Computers，2018，41（5）：1021-1036.
[17] 吴进喜，高莹，张宗洋，等.基于区块链的多方隐私保护公平合同签署协议[J].信息安全学报，2018，3（3）：8-16.
WU J X，GAO Y，ZHANG Z Y，et al.A multi-party privacy preserving fair contract signing protocol based on blockchains[J].Journal of Cyber Security，2018，3（3）：8-16.
[18] 陈春玲，沈阳，余瀚.去中心化的征信系统模型研究[J].计算机技术与发展，2019，29（3）：122-126.
CHEN C L，SHEN Y，YU H.Research on decentralized model for credit information system[J].Computer Technology and Development，2019，29（3）：122-126.
[19] AHMAD A，SAAD M，BASSIOUNI M，et al.Towards blockchain-driven，secure and transparent audit logs[C]//Proceedings of the 15th EAI International Conference on Mobile and Ubiquitous Systems：Computing，Networking and Services，2018：443-448.
[20] 刘明达，陈左宁，拾以娟，等.区块链在数据安全领域的研究进展[J].计算机学报，2021，44（1）：1-27.
LIU M D，CHEN Z N，SHI Y J，et al.Research progress of blockchain in data security[J].Chinese Journal of Computers，2021，44（1）：1-27.
[21] LUU L，NARAYANAN V，ZHENG C，et al.A secure sharding protocol for open blockchains[C]//Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security，2016：17-30.
[22] SUZUKI S，MURAI J.Blockchain as an auditable communication channel[C]//IEEE 41st Annual Computer Software and Applications Conference（COMPSAC），2017：516-522.
[23] TURKANOVIC M，HOLBL M，KOSIC K，et al.EduCTX：a blockchain-based higher education credit platform[J].IEEE Access，2018，6：5112-5127.
[24] GAO H Y，LI L X，CHANG X Y，et al.ZombieCoin3.0：on the looming of a novel botnet fortified by distributed ledger technology and internet of things[C]//2021 IEEE 23rd International Conference on High Performance Computing & Communications（HPCC），Hainan，China，2021：1625-1634.
[25] 刘开放，付绍静，苏金树，等.面向物联网多域协同的IOTA区块链优化方案[J].信息网络安全，2020，20（10）：41-48.
LIU K F，FU S J，SU J S，et al.An optimizing scheme on multi-domain collaberative IOTA blockchain technology for the Internet of things[J].Netinfo Security，2020，20（10）：41-48.
[26] FAN K，WANNG S，REN Y，et al.Medblock：efficient and secure medical data sharing via blockchain[J].Journal of Medical Systems，2018，42（8）：1-11.
[27] SUTTON A，SAMAVI R.Blockchain enabled privacy audit logs[C]//International Semantic Web Conference.Cham：Springer，2017：645-660.
[28] DAGHER G G，MOHLER J，MILOJKOVIC M，et al.Ancile：privacy-preserving framework for access control and interoperability of electronic health records using blockchain technology[J].Sustainable Cities and Society，2018，39（2）：283-297.