An access control scheme for distributed Internet of Things based on adaptive trust evaluation and blockchain

The Internet of Things (IoT) has the characteristics of limited resources and wide range of points. Aiming at the problems of policy centralization and single point of failure in traditional access control schemes, a distributed access control method based on adaptive trust evaluation and smart contract is proposed to provide fine-grained, flexible and scalable authorization for IoT devices with limited resources. Firstly, a modular access control architecture with integrated blockchain is proposed to achieve hierarchical management of IoT devices. Secondly, an IoT trust evaluation model called AITTE based on adaptive fusion weights is designed to effectively improve the identification of illegal access requests from malicious nodes. Finally, an attribute-based access control model using smart contract called AACSC which is built, which consists of attribute set contract (ASC), registration contract (RC), state judgment contract (SJC), authority permission management contract (AMC), and access control contract (ACC). As experimental results show, the scheme can effectively solve the problem of access security in resource-constrained IoT environments. Moreover, it also ensures the reliability and efficiency of the access control implementation process.(c) 2023 The Author(s). Published by Elsevier B.V. on behalf of Shandong University. This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/).