A Token-Based Access Control Mechanism for the Internet of Things Using Blockchain.

The traditional access control model faces the problems of coarse granularity and poor management, and its centralized implementation architecture also leads to the emergence of security problems such as single point of failure and information leakage. In response to this problem, this paper proposes a token-based access control mechanism and uses blockchain technology for distributed implementation. In our scheme, the access control process consists of three steps: Policy upload, Token request and Resource request. It takes the token as the credentials of user access permissions as well as realizes fine-grained resource allocation and permission management through token control. In addition, we use blockchain technology for distributed implementation, which alleviates the security risks brought by the centralized architecture. The performance evaluation results show that the model can achieve reliable permission allocation and management and control the access request processing delay within 1 s.