面向工业设备配置的双链协同验证安全机制OA
Dual-chain collaborative verification security mechanism for industrial device configuration
针对工业设备配置场景中存在的身份认证粒度不足、权限管理混乱及操作审计追溯效率低下等问题,提出一种面向工业设备配置的双链协同验证安全机制.通过将用户信息与配置操作数据分离记录,构建用户信息与配置操作数据链,实现权限管理与行为审计的独立解耦;采用联盟链架构,结合动态密钥协商、跨节点共识验证和双向身份认证技术,克服传统模型在复杂环境下的扩展性瓶颈.实验结果表明,在与单链架构、中心化模型及去中心化访问控制方案的对比测试中,提出的机制误检率仅为 1.11%,较单链架构降低了 4.67 百分点;配置处理时延优于中心化模型;存储开销极低;在提升攻击识别精度的同时,兼顾了工业配置的高实时性与高安全性需求.
To address issues in industrial device configuration scenarios—such as insufficient granularity in identity authentication,disordered permission management,and low efficiency in operation auditing and traceability—this paper proposes a dual-chain collaborative verification security mechanism.By separating the recording of user information and configuration operation data,the mechanism constructs two distinct blockchains:a user information chain and a configuration operation data chain,thereby achieving decoupled management of permissions and behavioral auditing.The proposed mechanism adopts a consortium blockchain architecture and integrates dynamic key agreement,cross-node consensus verification,and bidirectional identity authentication technologies,effectively overcoming the scalability bottlenecks of traditional models in complex environments.Experimental results demonstrate that,compared with single-chain architectures,centralized models,and decentralized access control schemes,the proposed mechanism achieves a false positive rate of only 1.11%,representing a significant reduction of 4.67 percentage points compared to single-chain approaches.It also outperforms centralized models in configuration processing latency while maintaining extremely low storage overhead.Overall,the mechanism improves attack detection accuracy while satisfying the high real-time and high-security requirements of industrial configuration scenarios.
杨皓月;华自信;魏旻
重庆邮电大学 自动化学院/工业互联网学院,重庆 400065重庆邮电大学 自动化学院/工业互联网学院,重庆 400065重庆邮电大学 自动化学院/工业互联网学院,重庆 400065
信息技术与安全科学
双链区块链联盟链工业配置权限管理
dual-chain blockchainconsortium blockchainindustrial configurationpermission management
《重庆邮电大学学报(自然科学版)》 2026 (2)
214-222,9
基础科研项目(JCKY2023204B014)四川省科技计划项目(2024YFHZ0088) Basic Research Project(JCKY2023204B014)Sichuan Science and Technology Program(2024YFHZ0088)
评论