Information service platforms or management information systems of various institutions or sectors of enterprises are gradually interconnected to form a multi-domain environment. A multi-domain environment is convenient for managers to supervise and manage systems, and for users to access data across domains and systems. However, given the complex multi-domain environment and many users, the traditional or enhanced role-based access control (RBAC) model still faces some challenges. It is necessary to address issues such as role naming conflicts, platform–domain management conflicts, inter-domain management conflicts, and cross-domain sharing difficulties. For the above problems, a role-based access control model for inter-system cross-domain in multi-domain environment (RBAC-IC) is proposed. This paper formally defines the model, divides roles into abstract roles and specific roles, and designs the operating process of the access control model. The model has four characteristics: support role name repetition, platform–domain isolation management, inter-domain isolation management, and fine-grained cross-domain sharing. By establishing security violation formulas for security analysis, it is finally shown that RBAC-IC can operate safely.
As blockchain technology plays an increasingly important role in the Internet of Vehicles, how to further enhance the data consensus between the areas of the Internet of Vehicles has become a key issue in blockchain design. The traditional blockchain-based vehicle networking consensus mechanism adopts the double-layer PBFT architecture, through the grouping of nodes for first intra-group consensus, and then global consensus. To further reduce delay, we propose a CRMWSL-PBFT algorithm (C-PBFT) for vehicle networking. Firstly, in order to ensure the security of RSU nodes in the network of vehicles and reduce the probability of malicious nodes participating in the consensus, we propose to calculate the reputation of RSU nodes based on multi-weighted subjective logic (CRMWSL) model. Secondly, in order to ensure the efficiency of blockchain data consensus, we improve the consensus protocol of traditional double-layer PBFT, change the election method of the committee and the PBFT consensus process, and improve throughput by reducing the number of consensus nodes. For the committee, we combine the credibility value and hash method to ensure the credibility of nodes, but also to ensure a certain degree of election randomness. For the PBFT consensus process, the regional committee consensus is carried out first, and then the regional master node carries out the global consensus. Through experimental comparison, we show that the C-PBFT significantly reduces consensus time, network overhead, and is scalable for Internet of Vehicles.
With the rapid development of information technology, the Internet of Things (IoT) has become more complex, and more and more devices and users are connected to the IoT system. While improving data interactivity and expanding the scope of data sharing, secure access to IoT resources is also facing great risks. Therefore, it is necessary to design an appropriate access control scheme. Firstly, this paper introduces Decentralized Identifiers (DID) and Verifiable Credentials. It is used for authentication and rights management of users and devices, respectively, which makes identity and authority unforgeable. Secondly, this paper uses blockchain technology to support DID and Verifiable Credentials, which can ensure the decentralization, invariance and traceability of data. Finally, using smart contracts enables automatic processing of requester authorization and access requests. The test results show that the scheme has good performance.
With the concept of multi-domain joint combat, the future joint combat simulation system will develop in the direction of trans-military species and trans-regional. In response to the problem that the existing combat simulation system can hardly guarantee the security and reliability of data interaction in multi-domain joint combat simulation, a blockchain-based multi-domain joint combat simulation system framework is constructed. The corresponding technical solutions are given for the data layer, network layer, consensus layer, contract layer and application layer of the system. The block storage format of the data layer, the content of the simulation data to be packaged and the verification method during transmission are mainly studied. Proposed a hybrid consensus mechanism based on traditional deterministic consensus algorithm with high availability and high fault tolerance. A smart contract for the joint combat simulation process and a smart contract for the secondary processing of simulation data are designed. Finally, the workflow of the whole system is illustrated by a case study.