基于联盟链的电力数据安全存储与访问控制方案

Consortium blockchain-based secure storage and access control of power data

摘要

随着电力行业数字化转型和智能电网技术的深入发展，电力系统中产生的大规模数据对安全存储与高效访问提出了更高要求。传统存储模式存在监管困难、溯源效率低等问题。为此，该文提出了一种基于联盟链的电力数据安全存储与访问控制方案。构建了一种链上链下相结合的电力数据存储模式，将电力数据加密后存储在存储服务器，并利用联盟链记录关键信息，确保了数据的机密性、不可篡改性和可追溯性。利用布隆过滤器和对称加密设计了一种支持关键字检索的加密存储方法，在保证数据安全存储的同时，实现了高效的数据检索，提升了系统的实用性。此外，基于智能合约和盲签名实现了基于用户属性的访问控制，实现细粒度的权限管理，确保数据访问的安全性和灵活性。同时提供了形式化的安全性分析，证明所提方案在保证关键字安全性的同时能抵抗冒充攻击和窃听攻击。性能分析表明，与现有方案相比，所提方案在数据搜索阶段将计算开销降低了68%，在数据访问阶段将通信开销降低了37%。

Abstract

With the digital transformation of the power industry and the widespread adoption of smart grid technologies, the massive volume of data generated within power systems has imposed higher demands on secure storage and efficient access. However, traditional data storage models face challenges, such as difficulties in regulatory supervision and low efficiency in data traceability. To address these issues, this paper proposes a secure storage and access control scheme for power data based on consortium blockchains. In this scheme, a hybrid storage model combining on-chain and off-chain mechanisms is established, the encrypted power data is stored in the storage server, and the key information is recorded on the consortium blockchain, which ensures data confidentiality, immutability, and traceability. An encrypted data storage method supporting keyword search is designed by Bloom filters and symmetric encryption. While ensuring the secure storage of data, the designed method achieves efficient data retrieval and enhances the practicality of systems. Moreover, smart contract and blind signature are utilized to achieve user attribute-based access control, which achieves fine-grained permission management and ensures the security and flexibility of data access. A formal security analysis demonstrates that the proposed scheme can effectively resist impersonation and eavesdropping attacks while ensuring the security of keyword information. Performance evaluation shows that, compared with existing schemes, the proposed solution reduces computational overhead by 68% during the data search phase and lowers communication overhead by 37% during the data access phase.

关键词

电力数据 / 联盟链 / 安全存储 / 访问控制

Key words

power data / consortium blockchain / encrypted storage / access control

参考文献

[1] ZUO Y T , KANG Z Z , XU J , et al. BCAS: A blockchain—based ciphertext—policy attribute—based encryption scheme for cloud data security sharing[J]. International Journal of Distributed Sensor Networks, 2021, 17(3): 155014772199961.

[2] 杨颜博, 张嘉伟, 马建峰 . 一种使用区块链保护车联网数据隐私的方法[J]. 西安电子科技大学学报, 2021, 48(3): 21-30.

[3] YANG Y B , ZHANG J W , MA J F . Method for using the blockchain to protect data privacy of IoV[J]. Journal of Xidian University, 2021, 48(3): 21-30.

[4] 李雪莲, 张夏川, 高军涛, 等. 支持属性和代理重加密的区块链数据共享方案[J]. 西安电子科技大学学报, 2022, 49(1): 1-16.

[5] LI X L , ZHANG X C , GAO J T , et al. Blockchain data sharing scheme supporting attribute and proxy re—encryption[J]. Journal of Xidian University, 2022, 49(1): 1-16.

[6] FAN K , PAN Q , ZHANG K , et al. A secure and verifiable data sharing scheme based on blockchain in vehicular social networks[J]. IEEE Transactions on Vehicular Technology, 2020, 69(6): 5826-5835.

[7] 曾辉祥, 习宁, 谢晴晴, 等. 抗属性篡改的去中心化密文数据安全共享[J]. 西安电子科技大学学报, 2022, 49(2): 135-145.

[8] ZENG H X , XI N , XIE Q Q , et al. Decentralized ciphertext sharing based on blockchain[J]. Journal of Xidian University, 2022, 49(2): 135-145.

[9] 尚松超, 陈勃翰, 颜光伟, 等. 基于区块链的数据共享访问控制模型[J]. 通信技术, 2021, 54(12): 2666-2673.

[10] SHANG S C , CHEN B H , YAN G W , et al. Model for data sharing and access control based on blockchain[J]. Communications Technology, 2021, 54(12): 2666-2673.

[11] GODFREY W S , SIVA K A , RAMESH R . User centric block—level attribute based encryption in cloud using blockchains[J]. Computer Systems Science and Engineering, 2022, 42(2): 605-618.

[12] ZHANG L Y , ZHANG T S , WU Q , et al. Secure decentralized attribute—based sharing of personal health records with blockchain[J]. IEEE Internet of Things Journal, 2022, 9(14): 12482-12496.

[13] XIANG X Y , ZHAO X W . Blockchain—assisted searchable attribute—based encryption for e—health systems[J]. Journal of Systems Architecture, 2022, 124: 102417.

[14] HASSIJA V , CHAMOLA V , GARG S , et al. A blockchain—based framework for lightweight data sharing and energy trading in V2G network[J]. IEEE Transactions on Vehicular Technology, 2020, 69(6): 5799-5812.

[15] ZHANG L H , CAO Y , ZHANG G Z , et al. A blockchain—based microgrid data disaster backup scheme in edge computing[J]. Security and Communication Networks, 2021, 2021: 9121571.

[16] ZHANG M , WANG S , ZHANG P , et al. Protecting data privacy for permissioned blockchains using identity—based encryption[C]// Proceedings of the IEEE 3rd Information Technology, Networking, Electronic and Automation Control Conference. [S.l.]: IEEE, 2019: 602-605.

[17] WANG Z , LIN J Q , CAI Q W , et al. Blockchain—based certificate transparency and revocation transparency[C]// Financial Cryptography and Data Security. Berlin, Heidelberg: Springer, 2019: 144-162.

[18] ZYSKIND G , NATHAN O , PENTLAND A . Decentralizing privacy: Using blockchain to protect personal data[C]// Proceedings of the IEEE Security and Privacy Workshops. New York: IEEE, 2015: 180-184.

[19] 孙浩, 毛瀚宇, 张岩峰, 等. 区块链跨链技术发展及应用[J]. 计算机科学, 2022, 49(5): 287-295.

[20] SUN H , MAO H Y , ZHANG Y F , et al. Development and application of blockchain cross—chain technology[J]. Computer Science, 2022, 49(5): 287-295.

[21] YIN Z Y , ZHANG B S , XU J Z , et al. Bool network: An open, distributed, secure cross—chain notary platform[J]. IEEE Transactions on Information Forensics and Security, 2022, 17: 3465-3478.

[22] LIN S F , KONG Y H , NIE S T , et al. Research on cross—chain technology of blockchain[C]// Proceedings of the 6th International Conference on Smart Grid and Electrical Automation. [S.l.]: IEEE, 2021: 405-408.

[23] 张朝栋, 王宝生, 邓文平 . 基于侧链技术的供应链溯源系统设计[J]. 计算机工程, 2019, 45(11): 1-8.

[24] ZHANG C D , WANG B S , DENG W P . Design of supply chain traceability system based on side chain technology[J]. Computer Engineering, 2019, 45(11): 1-8.

[25] LI Z J , ZHANG Z H . Research and implementation of multi—chain digital wallet based on hash TimeLock[M]// Blockchain and Trustworthy Systems. Singapore: Springer Singapore, 2019: 175-182.

[26] 叶少杰, 汪小益, 徐才巢, 等. BitXHub: 基于侧链中继的异构区块链互操作平台[J]. 计算机科学, 2020, 47(6): 294-302.

[27] YE S J , WANG X Y , XU C C , et al. BitXHub: Side—relay chain based heterogeneous blockchain interoperable platform[J]. Computer Science, 2020, 47(6): 294-302.

[28] JIANG C S , XU C X , CHEN J , et al. Blockchain—based immunization against kleptographic attacks[J]. Science China Information Sciences, 2024, 67(7): 172102.

[29] CHEN T Y , XU P , WANG W , et al. Bestie: Very practical searchable encryption with forward and backward security[C]// Computer Security—ESORICS 2021. Cham: Springer, 2021: 3-23.

[30] JIANG C S , XU C X , DONG X F , et al. An efficient privacy—preserving scheme for weak password collection in Internet of Things against perpetual leakage[J]. IEEE Transactions on Information Forensics and Security, 2024, 20: 1405-1420.

[31] GHAREH C J , PAPADOPOULOS D , PAPAMANTHOU C , et al. New constructions for forward and backward private symmetric searchable encryption[C]// Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. New York: ACM, 2018: 1038-1055.

[32] TARKOMA S , ROTHENBERG C E , LAGERSPETZ E . Theory and practice of bloom filters for distributed systems[J]. IEEE Communications Surveys & Tutorials, 2012, 14(1): 131-155.

基金资助

国网四川省电力公司科技项目资助(521908230001)