| With the emergence of new technologies such as big data,cloud computing,and blockchain,the digital economy is profoundly changing human production and lifestyles.As a production factor in the digital economy,data plays a role in value distribution,and data sharing is an important way for enterprises to obtain data value.However,the information management of vertical industries and applications has led to frequent cross-domain interaction,diverse interaction standards,difficulties in user identity authentication,and user permission delineation,posing new challenges to data access control.Blockchain,as a trust machine,can establish node trust in a distributed environment,providing a solution to the problems that exist in distributed data sharing.Therefore,a cross-domain data sharing and a hybrid access control model based on blockchain are proposed in this paper.The main contributions are as follows:(1)To address the problem that existing access control models are difficult to meet the requirements of cross-domain data sharing,Fabric-ABAC,a cross-domain data security sharing model based on blockchain,is proposed.A distributed network in which sharing parties directly participate is constructed to solve the security risks brought by centralization.Using attribute-based access control ideas,a unified access control model is built for distributed multi-domain environments.Smart contracts are developed to automate and make transparent decisions on data access permissions,achieving fine-grained and multi-level data cross-domain access control.A one-way proxy re-encryption algorithm with no bilinear pairs is proposed to solve the confidentiality issue of ledger data,achieving re-encryption without third-party involvement.The IPFS interplanetary file system is used for distributed storage and sharing of resources,improving the efficiency of data sharing.Experiments show that the smart contract throughput of this model can reach 1000 tps.(2)To address the problems of complex grain traceability process,involvement of multiple enterprises,unequal traceability information,and lack of unified collaboration standards,a hybrid access control model named Grain-info-share is proposed for grain traceability.A distributed dual-chain architecture is designed for the collaborative use of information sharing chains and traceability chains.The information sharing chain provides a cross-chain query interface for the traceability chain,supplementing missing and unequal information in real-time,achieving full-process,full-chain traceability of grain circulation.Combined with attribute-based access control and capability token-based access control,a smart contract-driven hybrid mode cross-domain resource collaboration model is proposed.The model adopts the ECDH key negotiation protocol to ensure the confidentiality of on-chain data,providing a flexible and autonomous cross-domain collaboration model for grain circulation enterprises.Experiments show that the smart contract throughput of this model can reach 1000 tps,with a delay of less than 0.1s,showing good performance and can be widely used in secure sharing and collaboration of grain traceability data.(3)Simulation experiments are conducted on Hyperledger Fabric to implement a blockchain-based grain traceability data sharing and collaboration scheme,and a distributed dual-chain grain traceability and cross-domain resource sharing platform is constructed.The modules and functions of this case are designed and implemented,demonstrating the functional implementation results of this system.Finally,comparisons show that this scheme has certain advantages in granularity and flexibility. |
