论文标题
具有智能合约的灵活,分散的访问控制权
Flexible, Decentralized Access Control for Smart Buildings with Smart Contracts
论文作者
论文摘要
大型商业建筑是复杂的网络物理系统,其中包含昂贵且关键的设备,可确保其众多乘员的安全性和舒适性。然而,乘员和访客可以通过非系统性,效率低下和人力密集型过程来管理这些建筑物内的空间和设备。作为标准做法,长期建筑居民根据其组织角色授予房间和设备的访问权限,而访客必须由他们的主人护送。这种方法是保守和僵化的。在本文中,我们描述了一种方法,可以考虑到与访问建筑物内每个空间相关的风险,可以灵活,安全地管理长期居住者和短期访客的建筑物访问权限。我们的方法论依靠区块链智能合约来描述,授予,审计和撤销对建筑物和访客的精细元素权限,以分散的方式。智能合约是通过利用建筑物的砖和机器人模型收集的信息的过程来指定的。我们通过典型的应用程序场景在真实的办公楼建设中说明了提出的方法,并认为它可以大大减少管理开销,而同时提供了精细的,可审核的访问控制。
Large commercial buildings are complex cyber-physical systems containing expensive and critical equipment that ensure the safety and comfort of their numerous occupants. Yet occupant and visitor access to spaces and equipment within these buildings are still managed through unsystematic, inefficient, and human-intensive processes. As a standard practice, long-term building occupants are given access privileges to rooms and equipment based on their organizational roles, while visitors have to be escorted by their hosts. This approach is conservative and inflexible. In this paper, we describe a methodology that can flexibly and securely manage building access privileges for long-term occupants and short-term visitors alike, taking into account the risk associated with accessing each space within the building. Our methodology relies on blockchain smart contracts to describe, grant, audit, and revoke fine-grained permissions for building occupants and visitors, in a decentralized fashion. The smart contracts are specified through a process that leverages the information compiled from Brick and BOT models of the building. We illustrate the proposed method through a typical application scenario in the context of a real office building and argue that it can greatly reduce the administration overhead, while, at the same time, providing fine-grained, auditable access control.