BSeIn: A blockchain-based secure mutual authentication with fine-grained access control system for industry 4.0. (15th August 2018)

• Record Type: Journal Article
• Authors: Lin, Chao; He, Debiao; Huang, Xinyi; Choo, Kim-Kwang Raymond; Vasilakos, Athanasios V.
• Is Part Of: Journal of network and computer applications. Volume 116(2018)
• Page Start: 42
• Page End: 52
• Publication Date: 2018-08-15
• Subjects: Industry 4.0 -- Smart factory -- Blockchain -- Smart contract -- Authentication -- Access control -- Blockchain-based secure mutual authentication; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2018.05.005
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: To be prepared for the 'Industry 4.0'-era, we propose a hierarchical framework comprising four tangible layers, which is designed to vertically integrate inter-organizational value networks, engineering value chain, manufacturing factories, etc. The conceptual framework allows us to efficiently implement a flexible and reconfigurable smart factory. However, we need to consider security inherent in existing (stand-alone) devices and networks as well as those that may arise in such integrations. Especially the existing solutions are insufficient to address these fundamental security concerns. Thus, we present a blockchain-based system for secure mutual authentication, BSeIn, to enforce fine-grained access control polices. The proposed system (with integrated attribute signature, multi-receivers encryption and message authentication code) is designed to provide privacy and security guarantees such as anonymous authentication, auditability, and confidentiality. BSeIn also scales well due to the utilization of smart contract. We then evaluate the security and performance of BSeIn. For example, findings from the performance evaluation demonstrate that Initialization/Request Issuance/Chain Transaction/State Delivery/Permission Update phase only cost 12.123/4.810/6.978/0.013/2.559s, respectively.